Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-4972
HistoryJan 08, 2018 - 7:29 p.m.

CVE-2014-4972

2018-01-0819:29:00
CWE-434
[email protected]
web.nvd.nist.gov
20
4
cve-2014-4972
file upload
vulnerability
gravity upload ajax plugin
wordpress
remote code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.5%

JSON

Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-content/uploads/gravity_forms.

Affected configurations

NVD
Node
ajax_upload_for_gravity_forms_projectajax_upload_for_gravity_formsRange≤1.1wordpress

Social References

More

Related

patchstack 2
prion 1
nvd 1
wpvulndb 1
cvelist 1
patchstack
patchstack
WordPress Gravity Upload Ajax Plugin <= 1.1 - Arbitrary File Upload
2014-08-01 00:00:00
WordPress Gravity Upload Ajax Plugin <= 1.1 - Arbitrary File Upload
2014-08-01 00:00:00
prion
prion
Unrestricted file upload
2018-01-08 19:29:00
nvd
nvd
CVE-2014-4972
2018-01-08 19:29:00
wpvulndb
wpvulndb
Gravity Upload Ajax <= 1.1 - Arbitrary File Upload
2014-08-01 00:00:00
cvelist
cvelist
CVE-2014-4972
2018-01-08 19:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.5%

JSON
Related for CVE-2014-4972
patchstack2prion1nvd1wpvulndb1cvelist1