Lucene search

[email protected]CVE-2014-6446

HistorySep 26, 2014 - 9:55 p.m.

CVE-2014-6446

2014-09-2621:55:07

CWE-94

[email protected]

web.nvd.nist.gov

cve-2014-6446

infusionsoft

gravity forms plugin

wordpress

remote code execution

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.712 High

EPSS

Percentile

98.1%

JSON

The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.

Affected configurations

NVD

Node

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.3wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.4wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.4.1wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.4.2wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.5wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.6wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.7wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.7.1wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.7.2wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.8wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.8.1wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.1wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.2wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.3wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.4wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.5wordpress

infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.10wordpress

CPENameOperatorVersion
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.3
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.4
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.4.1
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.4.2
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.5
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.6
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.7
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.7.1
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.7.2
infusionsoft_gravity_forms_project:infusionsoft_gravity_formsinfusionsoft gravity forms project infusionsoft gravity formseq1.5.8

CPE	Name	Operator	Version
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.3
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.4
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.4.1
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.4.2
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.5
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.6
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.7
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.7.1
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.7.2
infusionsoft_gravity_forms_project:infusionsoft_gravity_forms	infusionsoft gravity forms project infusionsoft gravity forms	eq	1.5.8