Lucene search

K
cve[email protected]CVE-2012-3575
HistoryJun 16, 2012 - 12:55 a.m.

CVE-2012-3575

2012-06-1600:55:07
CWE-264
web.nvd.nist.gov
29
cve-2012-3575
unrestricted file upload
rbx gallery
wordpress
vulnerability
remote code execution
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.099 Low

EPSS

Percentile

94.9%

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.

Affected configurations

NVD
Node
rbx_galleryrbx_galleryMatch2.1
AND
wordpresswordpressMatch-

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.099 Low

EPSS

Percentile

94.9%