37 matches found
CVE-2015-4133
CVE-2015-4133 CVE 2015-4133 - Reflex Gallery 3.1.3 Arbitrary File Upload to RCE Description Reflex Gallery is a Wordpress plugins which has a vulnerability on its 3.1.3 version which can be exploited easily by attackers to upload arbitrary files, for example PHP code to achieve Remote Command...
CVE-2015-4133
CVE-2015-4133 usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery plugin de WordPress = 3.1.3 CVE-2015-4133 PoC. Referencia: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 argumentos posicionales: YEAR subdirectorio de wp-content/uploads MONTH subdirectorio de...
EUVD-2013-7240
Malware in sbrugna...
CVE-2013-7482
The reflex-gallery plugin before 1.4.3 for WordPress has XSS...
WordPress reflex-gallery plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. reflex-gallery is a responsive photo gallery plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2013-7482
The reflex-gallery plugin before 1.4.3 for WordPress has XSS...
Cross site scripting
The reflex-gallery plugin before 1.4.3 for WordPress has XSS...
CVE-2013-7482
The reflex-gallery plugin before 1.4.3 for WordPress has XSS...
CVE-2013-7482
The CVE-2013-7482 entry concerns the Reflex Gallery WordPress plugin, with the affected component being the reflex-gallery plugin for WordPress. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability present in versions prior to 1.4.3. The Red Hat entry and CNVD/CVE records...
CVE-2013-7482: Improper Neutralization of Input During Web Page Generation
The reflex-gallery plugin before 1.4.3 for WordPress has XSS...
WordPress ReFlex Gallery 3.1.3 File Upload
File upload in WordPress ReFlex Gallery plugin php.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
CVE-2015-4133
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/...
CVE-2015-4133
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/...
CVE-2015-4133
CVE-2015-4133 concerns the ReFlex Gallery WordPress plugin (affected version: before 3.1.4). The issue is an unrestricted file upload in admin/scripts/FileUploader/php.php, allowing an attacker to upload a PHP file and access it via uploads/ to execute arbitrary code remotely. The root cause is i...
WordPress ReFlex Gallery Plugin <= 3.1.3 - Unrestricted File Upload
This vulnerability is in admin/scripts/FileUploader/php.php. It allows an attacker to execute arbitrary PHP code by uploading a file with a PHP extension. And then an attacker can access it via a direct request to the file in uploads/ directory. Solution Update the plugin...
CVE-2015-4133: Undefined Security Weakness
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/...
WordPress ReFlex Gallery Plugin <= 1.4.2 - Unspecified XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...
WordPress ReFlex Gallery Plugin <= 1.3 - Shell Upload
This plugin is prone to a shell upload vulnerability. Solution Update plugin...
