Published: 11/09/2014 Updated: 09/10/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 660

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin prior to 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tribulant tibulant slideshow gallery 1.4.4
tribulant tibulant slideshow gallery 1.4.5
tribulant tibulant slideshow gallery
tribulant tibulant slideshow gallery 1.4.2
tribulant tibulant slideshow gallery 1.4.3
tribulant tibulant slideshow gallery 1.4
tribulant tibulant slideshow gallery 1.4.1

Summary: WordPress Slideshow Gallery plugin version 146 suffers from a remote shell upload vulnerability Found by: Jesus Ramirez Pichardo @whitexploit whitexploitblogspotmx/ Date: 2014-08-28 Vendor Homepage: tribulantcom/ Software: Slideshow Gallery Version: 146 Software Link: downloadswordpressorg/plugin/slidesh ...

#!/usr/bin/env python # # WordPress Slideshow Gallery 146 Shell Upload Exploit # # WordPress Slideshow Gallery plugin version 146 suffers from a remote shell upload vulnerability (CVE-2014-5460) # # Vulnerability discovered by: Jesus Ramirez Pichardo - whitexploitblogspotmx/ # # Exploit written by: Claudio Viviani - info@homelabit - h ...

WordPress Slideshow Gallery plugin version 146 shell upload exploit ...

WordPress Slideshow Gallery plugin version 146 suffers from a remote shell upload vulnerability ...

CWE-20 https://wordpress.org/plugins/slideshow-gallery/changelog http://www.exploit-db.com/exploits/34514 http://whitexploit.blogspot.mx/2014/08/wordpress-slideshow-gallery-146-shell.html http://secunia.com/advisories/60074 http://packetstormsecurity.com/files/128069/WordPress-Slideshow-Gallery-1.4.6-Shell-Upload.html http://www.exploit-db.com/exploits/34681 https://exchange.xforce.ibmcloud.com/vulnerabilities/95676 http://www.securityfocus.com/archive/1/533281/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/34514/

CVE-2014-5460

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect