Unrestricted file upload

2013-09-3022:55:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.718 High

EPSS

Percentile

98.1%

JSON

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.

CPENameOperatorVersion
complete_gallery_manager_plugineq3.2.4 rev34757
complete_gallery_manager_plugineq3.1.1 rev30900
complete_gallery_manager_plugineq1.0.2 rev25487
complete_gallery_manager_plugineq3.0.0 rev29469
complete_gallery_manager_plugineq3.2.6 rev36235
complete_gallery_manager_plugineq3.3.1 rev38906
complete_gallery_manager_pluginle3.3.3
complete_gallery_manager_plugineq2.0.1 rev27876
complete_gallery_manager_plugineq2.0.0 rev27524
complete_gallery_manager_plugineq3.2.3 rev34390

Name	Operator	Version
complete_gallery_manager_plugin	eq	3.2.4 rev34757
complete_gallery_manager_plugin	eq	3.1.1 rev30900
complete_gallery_manager_plugin	eq	1.0.2 rev25487
complete_gallery_manager_plugin	eq	3.0.0 rev29469
complete_gallery_manager_plugin	eq	3.2.6 rev36235
complete_gallery_manager_plugin	eq	3.3.1 rev38906
complete_gallery_manager_plugin	le	3.3.3
complete_gallery_manager_plugin	eq	2.0.1 rev27876
complete_gallery_manager_plugin	eq	2.0.0 rev27524
complete_gallery_manager_plugin	eq	3.2.3 rev34390