CVE-2015-7773

MEDIUM 6.5CVE-2015-7773 · Published 20/11/2015 · updated 17/06/2026

In short

CVE-2015-7773 is a MEDIUM (CVSS 6.5) vulnerability affecting kirby (bastian allgeier).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kirby bastian_allgeier	`≤ 2.1.1`	No fix yet

Description

Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension.

References

getkirby.com/changelog/kirby-2-1-2 · Patch
jvn.jp/en/jp/JVN34780384/index.html · Vendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2015-000182 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free