Home > Vulnerability Database > CVE-2015-7684

WhiteSource Vulnerability Database

CVE-2015-7684

Good to know:

Date: October 5, 2015

Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/_tmp/.

Language: PHP

Severity Score

9.0

Related Resources (5)

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-7684

Url: http://www.glpi-project.org/spip.php?page=annonce&id_breve=338

Url: http://seclists.org/fulldisclosure/2015/Feb/71

Url: https://forge.glpi-project.org/issues/5217

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2015-7684

Severity Score

9.0

Top Fix

Upgrade Version

Upgrade to version 0.85.3

Learn More

CVSS v2

Base Score:	9.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2015-7684

Good to know:

Date: October 5, 2015

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Top Fix

Upgrade Version

CVSS v2

Do you need more information?