CVE

Id
72758  
CVE No.
CVE-2014-5460  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.  
Phase
Assigned (20140826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
685585 72758 CVE-2014-5460 BUGTRAQ:20140830 WordPress Slideshow Gallery 1.4.6 Shell Upload Vulnerability (CVE-2014-5460)  View
685586 72758 CVE-2014-5460 URL:http://www.securityfocus.com/archive/1/archive/1/533281/100/0/threaded  View
685587 72758 CVE-2014-5460 EXPLOIT-DB:34514  View
685588 72758 CVE-2014-5460 URL:http://www.exploit-db.com/exploits/34514  View
685589 72758 CVE-2014-5460 EXPLOIT-DB:34681  View
685590 72758 CVE-2014-5460 URL:http://www.exploit-db.com/exploits/34681  View
685591 72758 CVE-2014-5460 MISC:http://packetstormsecurity.com/files/128069/WordPress-Slideshow-Gallery-1.4.6-Shell-Upload.html  View
685592 72758 CVE-2014-5460 MISC:http://whitexploit.blogspot.mx/2014/08/wordpress-slideshow-gallery-146-shell.html  View
685593 72758 CVE-2014-5460 CONFIRM:https://wordpress.org/plugins/slideshow-gallery/changelog  View
685594 72758 CVE-2014-5460 SECUNIA:60074  View
685595 72758 CVE-2014-5460 URL:http://secunia.com/advisories/60074  View
685596 72758 CVE-2014-5460 XF:wp-slideshowgallery-cve20145460-shell-upload(95676)  View

Related JVN