CVE-2015-4133

CVE-2015-4133 concerns the ReFlex Gallery WordPress plugin (affected version: before 3.1.4). The issue is an unrestricted file upload in admin/scripts/FileUploader/php.php, allowing an attacker to upload a PHP file and access it via uploads/ to execute arbitrary code remotely. The root cause is i...

CVE-2015-4133

creationtimestamp| type| source ---|---|--- 2015-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36809 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpreflexgalleryfileupload.rb 2025-02-06...

Wordpress Reflex Gallery Upload Vulnerability

This module exploits an arbitrary PHP code upload in the WordPress Reflex Gallery version 3.1.3. The vulnerability allows for arbitrary file upload and remote code execution. Module Options msf use exploit/unix/webapp/wp/reflexgalleryfileupload msf undefinedreflexgalleryfileupload show actions...