CVE-2014-9312

High

Published: 28/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2014-9312 is a vulnerability related to unrestricted file upload in Photo Gallery version 1.2.5. This allows attackers to upload malicious files to the server.

Risk Assessment

The risk to the organization includes the potential execution of malicious code on the server, which could lead to system compromise or data leakage.

Recommendation

It is recommended to update the Photo Gallery application to the latest version that fixes this vulnerability and to implement additional controls on uploaded files.

Other vulnerabilities in Photo Gallery 1.2.5

CVE-2026-65519Medium
The Photo Gallery plugin versions up to 2.7.7.29 contain a Cross Site Scripting (XSS) vulnerability exploitable by authors. An author can inject malicious JavaScript code.

Original NVD description (English source)

Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS