CVE-2015-0968

CVE-2015-0968 describes an unrestricted file upload vulnerability in SearchBlox versions prior to 8.2, specifically within the admin/uploadImage.html component. This flaw allows remote attackers to execute arbitrary code by uploading files with executable extensions while masquerading them as image/jpeg content. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (not in KEV) and no public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.