CVE-2015-1587
CVSS Score Not Available
79.22%
HIGH RiskEPSS (99th percentile)
Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.
Published: 2/19/2015
Modified: 4/12/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
79.22%HIGH Exploitation Risk
99th percentile
This vulnerability has a 79.22% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.