CVE-2014-5460
7.1 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.914 High
EPSS
Percentile
98.9%
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.
References
packetstormsecurity.com/files/128069/WordPress-Slideshow-Gallery-1.4.6-Shell-Upload.html
secunia.com/advisories/60074
whitexploit.blogspot.mx/2014/08/wordpress-slideshow-gallery-146-shell.html
www.exploit-db.com/exploits/34514
www.exploit-db.com/exploits/34681
www.securityfocus.com/archive/1/533281/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/95676
wordpress.org/plugins/slideshow-gallery/changelog
Social References
More
Related
7.1 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.914 High
EPSS
Percentile
98.9%