exploitDog

CVE-2015-4133

Опубликовано: 28 мая 2015

Источник: nvd

CVSS2: 7.5

EPSS Высокий

Описание

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory.

Комментарий

CWE-434: Unrestricted Upload of File with Dangerous Type

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:reflex_gallery_project:reflex_gallery:*:*:*:*:*:wordpress:*:*

Версия до 3.1.3 (включая)

EPSS

Процентиль: 99%

0.75217

Высокий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-jr4p-q6vp-jvr3

github

больше 3 лет назад

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory.

EPSS

Процентиль: 99%

0.75217

Высокий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other