CVE-2015-4415: Magnifica Webscripts Anima Gallery

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) theme or (2) lang cookie parameter to AnimaGallery/.

Affected products

• Magnifica Webscripts Anima Gallery: version 2.6 only

Published 2015-06-10. Last modified 2026-06-17.