Lucene search
HistorySep 26, 2014 - 9:55 p.m.
CVE-2014-6446
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.712 High
EPSS
Percentile
98.1%
The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.
Affected configurations
Node
infusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.3wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.4wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.4.1wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.4.2wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.5wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.6wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.7wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.7.1wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.7.2wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.8wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.8.1wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.1wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.2wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.3wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.4wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.9.5wordpress
ORinfusionsoft_gravity_forms_projectinfusionsoft_gravity_formsMatch1.5.10wordpress
Related
zdt
zdt
Wordpress InfusionSoft Upload Exploit
2014-10-09 00:00:00
packetstorm
packetstorm
Wordpress InfusionSoft Shell Upload
2015-03-24 00:00:00
Wordpress InfusionSoft Upload
2014-10-09 00:00:00
wpvulndb
wpvulndb
Infusionsoft Gravity Forms 1.5.3 - 1.5.10 Arbitrary File Upload
2014-10-06 17:26:08
prion
prion
Code injection
2014-09-26 21:55:00
cvelist
cvelist
CVE-2014-6446
2014-09-26 21:00:00
openvas
openvas
patchstack
patchstack
WordPress InfusionSoft Plugin - Upload Vulnerability
2014-10-09 00:00:00
cve
cve
CVE-2014-6446
2014-09-26 21:55:07
seebug
seebug
Wordpress InfusionSoft Plugin Upload Vulnerability
2014-10-10 00:00:00
metasploit
metasploit
Wordpress InfusionSoft Upload Vulnerability
2015-03-23 07:15:04
exploitdb
exploitdb
WordPress Plugin InfusionSoft - Arbitrary File Upload (Metasploit)
2014-10-09 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.712 High
EPSS
Percentile
98.1%
Related for NVD:CVE-2014-6446