CVE-2013-5962

Опубликовано: 30 сент. 2013

Источник: nvd

CVSS2: 5.1

EPSS Средний

Описание

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.

Комментарий

Per: http://cwe.mitre.org/data/definitions/434.html

'CWE-434: Unrestricted Upload of File with Dangerous Type'

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:envato:complete_gallery_manager_plugin:*:rev39177:*:*:*:*:*:*

Версия до 3.3.3 (включая)

cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.0:rev25273:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.1:rev25421:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.2:rev25487:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.0:rev27524:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.1:rev27876:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.2:rev28693:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.3:rev28734:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.0.0:rev29469:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.0.1:rev29536:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.1.0:rev30003:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.1.1:rev30900:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.0:rev31030:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.1:rev33197:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.2:rev33971:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.3:rev34390:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.4:rev34757:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.5:rev34942:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.6:rev36235:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.7:rev36257:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.8:rev36369:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.0:rev36620:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.1:rev38906:*:*:*:*:*:*

cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.2:rev39009:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.26577

Средний

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9vx7-4qrw-wfw5

github

больше 3 лет назад