NVD

Id
41176  
Name
CVE-2013-5962  
Description
Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-09-30  
Modified Date
2013-10-10  
Seq
2013-5962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
208553 41176 CVE-2013-5962 20130918 Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability  View
208554 41176 CVE-2013-5962 http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606  View
208555 41176 CVE-2013-5962 http://packetstormsecurity.com/files/123303  View
208556 41176 CVE-2013-5962 28377  View
208557 41176 CVE-2013-5962 http://www.vulnerability-lab.com/get_content.php?id=1080  View
208558 41176 CVE-2013-5962 completegallery-uploadimages-file-upload(87172)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22792 JVNDB-2013-004367 WordPress 用 Complete Gallery Manager プラグインの frames/upload-images.php における任意のコードを実行される脆弱性 WordPress 用 Complete Gallery Manager プラグインの frames/upload-images.php には、ファイルをアップロードされることにより、任意のコードを実行される脆弱性が存在します。 CVE-2013-5962 65904 CVE-2013-5962 41176 5.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004367.html 2013-09-19 2013-10-02 View