How severe is CVE-2015-0877?

CVE-2015-0877 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2015-0877 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (84th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-0877?

CVE-2015-0877 primarily affects C-board Moyuku Project C-board Moyuku. In total, 8 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-0877?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2015-0877 published?

CVE-2015-0877 was published on 2015-04-06 and last updated on 2026-06-17.

CVE-2015-0877

CVE-2015-0877 is a high-severity vulnerability in C-board Moyuku Project C-board Moyuku with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 3% (84th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: C-board Moyuku Project C-board Moyuku
Published: 2015-04-06
Last modified: 2026-06-17

Description

Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.

Frequently asked questions

What is CVE-2015-0877?: Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.
How severe is CVE-2015-0877?: CVE-2015-0877 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2015-0877 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (84th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2015-0877?: CVE-2015-0877 primarily affects C-board Moyuku Project C-board Moyuku. In total, 8 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2015-0877?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2015-0877 published?: CVE-2015-0877 was published on 2015-04-06 and last updated on 2026-06-17.

References

Affected products (8)

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:*:b2:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b1:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b2:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b3:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b4:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b6:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.02:b1:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.03:b1:*:*:*:*:*:*

More vulnerabilities in C-board Moyuku Project C-board Moyuku

CVE-2014-2002 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in C-BOARD Moyuku 1.01b6 and earlier allows remote attackers to inject…

All CVEs affecting C-board Moyuku Project C-board Moyuku →