CVE-2014-5460

Currently unrated

Key Information:

Vendor
Wordpress
Status
Tibulant Slideshow Gallery
Vendor
CVE Published:
11 September 2014

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 94%

Summary

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2014-5460
Created by brookeses69

References

http://www.exploit-db.com/exploits/34681
exploitx_refsource_EXPLOIT-DB
http://packetstormsecurity.com/files/128069/WordPress-Sli...
x_refsource_MISC
http://whitexploit.blogspot.mx/2014/08/wordpress-slidesho...
x_refsource_MISC

EPSS Score

94% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.