Lucene search
HistorySep 11, 2014 - 2:16 p.m.
CVE-2014-2223
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.218
Percentile
96.6%
Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authenticated users to execute arbitrary code by uploading a ZIP file that contains a PHP file and a non-zero length PNG file, then accessing the PHP file via a direct request to it in plog-content/uploads/archive/.
Affected configurations
Node
ploggerploggerRange≤1.0rc1
Related
packetstorm
packetstorm
Plogger Authenticated Arbitrary File Upload
2014-08-28 00:00:00
cvelist
cvelist
CVE-2014-2223
2014-09-11 14:00:00
exploitdb
exploitdb
Plogger 1.0-RC1 - (Authenticated) Arbitrary File Upload
2014-08-28 00:00:00
prion
prion
Unrestricted file upload
2014-09-11 14:16:00
zdt
zdt
Plogger 1.0-RC1 - Authenticated Arbitrary File Upload Exploit
2014-08-28 00:00:00
cve
cve
CVE-2014-2223
2014-09-11 14:16:04
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.218
Percentile
96.6%
Related for NVD:CVE-2014-2223