{"id":"CVE-2015-6967","aliases":["EUVD-2015-6899","GHSA-jc49-pxch-59wj"],"status":"published","title":"Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows...","description":"Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.49308,"percentile":0.98896,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2015-09-16T14:00:00Z","modified":"2026-06-17T00:31:40Z","exploits":[{"source":"exploitdb","id":"EDB-38489","title":"Nibbleblog 4.0.3 - Arbitrary File Upload (Metasploit)","type":"remote","platform":"php","date":"2015-10-19","verified":true,"url":"https://www.exploit-db.com/exploits/38489"},{"source":"metasploit","id":"exploit/multi/http/nibbleblog_file_upload","title":"Nibbleblog File Upload Vulnerability","type":"exploit","platform":"PHP","date":"2015-09-01","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/nibbleblog_file_upload"},{"source":"pocgithub","id":"3mpir3Albert/HTB_Nibbles","title":"3mpir3Albert/HTB_Nibbles","date":"2023-11-05","url":"https://github.com/3mpir3Albert/HTB_Nibbles"},{"source":"pocgithub","id":"FredBrave/CVE-2015-6967","title":"FredBrave/CVE-2015-6967","date":"2023-06-26","url":"https://github.com/FredBrave/CVE-2015-6967"},{"source":"pocgithub","id":"cuerv0x/CVE-2015-6967","title":"cuerv0x/CVE-2015-6967","date":"2025-06-23","url":"https://github.com/cuerv0x/CVE-2015-6967"},{"source":"pocgithub","id":"dix0nym/CVE-2015-6967","title":"dix0nym/CVE-2015-6967","date":"2021-02-25","url":"https://github.com/dix0nym/CVE-2015-6967"},{"source":"pocgithub","id":"innocentx0/CVE-2015-6967-EXPLOIT","title":"innocentx0/CVE-2015-6967-EXPLOIT","date":"2025-08-18","url":"https://github.com/innocentx0/CVE-2015-6967-EXPLOIT"}],"products":[{"vendor":"nibbleblog","product":"nibbleblog"}],"references":[{"url":"http://blog.curesec.com/article/blog/NibbleBlog-403-Code-Execution-47.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://blog.nibbleblog.com/post/nibbleblog-v4-0-5/","tags":["x_refsource_CONFIRM","x_transferred","Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Sep/5","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit"]},{"url":"http://packetstormsecurity.com/files/133425/NibbleBlog-4.0.3-Shell-Upload.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6967"},{"url":"http://blog.nibbleblog.com/post/nibbleblog-v4-0-5"},{"url":"https://github.com/advisories/GHSA-jc49-pxch-59wj"}],"sources":{"cve":[{"id":"CVE-2015-6967","description":"Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php.","status":"published","published":"2015-09-16T14:00:00Z","modified":"2024-09-17T01:56:43.474Z","updated_at":"2026-11-02T14:35:42.680858Z"}],"euvd":[{"id":"EUVD-2015-6899","description":"Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php.","status":"published","published":"2015-09-16T14:00:00Z","modified":"2024-09-17T01:56:43Z","updated_at":"2026-11-03T00:28:44.789987Z"}],"ghsa":[{"id":"GHSA-jc49-pxch-59wj","title":"Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows...","description":"Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php.","status":"published","published":"2022-05-17T04:07:23Z","modified":"2025-04-12T12:52:53Z","updated_at":"2026-11-02T15:01:23.793952Z"}],"nvd":[{"id":"CVE-2015-6967","description":"Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php.","status":"published","published":"2015-09-16T14:59:09.12Z","modified":"2026-06-17T00:31:40.747Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:09.92183Z"}]}}