Unrated severityNVD Advisory· Published Nov 20, 2015· Updated Jun 17, 2026

CVE-2015-7773

Description

Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Getkirby/Kirbyinferred3 versions
<2.1.2+ 2 more
- (no CPE)range: <2.1.2
- cpe:2.3:a:bastian_allgeier:kirby:*:*:*:*:*:*:*:*range: <=2.1.1
- (no CPE)range: <2.1.2

Patches

Vulnerability mechanics

References

getkirby.com/changelog/kirby-2-1-2nvdPatchVendor Advisory
jvn.jp/en/jp/JVN34780384/index.htmlnvdVendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2015-000182nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000