Lucene search

[email protected]NVD:CVE-2013-5963

HistorySep 30, 2013 - 10:55 p.m.

CVE-2013-5963

2013-09-3022:55:03

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.102 Low

EPSS

Percentile

95.0%

JSON

Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/wpdb/.

Affected configurations

NVD

Node

cdsincdesignsimple_dropbox_upload_formRange≤1.8.8

cdsincdesignsimple_dropbox_upload_formMatch0.5.0

cdsincdesignsimple_dropbox_upload_formMatch1.0.0

cdsincdesignsimple_dropbox_upload_formMatch1.1.0

cdsincdesignsimple_dropbox_upload_formMatch1.1.1

cdsincdesignsimple_dropbox_upload_formMatch1.1.2

cdsincdesignsimple_dropbox_upload_formMatch1.2.0

cdsincdesignsimple_dropbox_upload_formMatch1.3.0

cdsincdesignsimple_dropbox_upload_formMatch1.3.1

cdsincdesignsimple_dropbox_upload_formMatch1.4.0

cdsincdesignsimple_dropbox_upload_formMatch1.5.0

cdsincdesignsimple_dropbox_upload_formMatch1.5.1

cdsincdesignsimple_dropbox_upload_formMatch1.5.2

cdsincdesignsimple_dropbox_upload_formMatch1.5.3

cdsincdesignsimple_dropbox_upload_formMatch1.6.0

cdsincdesignsimple_dropbox_upload_formMatch1.7.0

cdsincdesignsimple_dropbox_upload_formMatch1.8.0

cdsincdesignsimple_dropbox_upload_formMatch1.8.1

cdsincdesignsimple_dropbox_upload_formMatch1.8.2

cdsincdesignsimple_dropbox_upload_formMatch1.8.3

cdsincdesignsimple_dropbox_upload_formMatch1.8.4

cdsincdesignsimple_dropbox_upload_formMatch1.8.5

cdsincdesignsimple_dropbox_upload_formMatch1.8.6

cdsincdesignsimple_dropbox_upload_formMatch1.8.7

AND

wordpresswordpressMatch-

References

packetstormsecurity.com/files/123235

plugins.trac.wordpress.org/changeset?reponame=&old=774214%40simple-dropbox-upload-form%2Ftrunk&new=774214%40simple-dropbox-upload-form%2Ftrunk

secunia.com/advisories/54856

wordpress.org/plugins/simple-dropbox-upload-form/changelog

exchange.xforce.ibmcloud.com/vulnerabilities/87166

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.102 Low

EPSS

Percentile

95.0%

JSON

Related for NVD:CVE-2013-5963

cve1 patchstack1 cvelist1 prion1 wpvulndb1