CVE-2014-5460
HighPublic exploitSlideshow Gallery < 1.4.7 - Arbitrary File Upload
Published Aug 28, 2014 · Updated Aug 6, 2024 · Also known as 068cb509-7451-4f2f-a65c-ed7686c6f6d7
Key Facts
Patch immediately- CVE-2014-5460 is a high-severity vulnerability (CVSS 8.8 v3.1) affecting Tibulant Slideshow Gallery (Tribulant), slideshow-gallery (wordpress-plugin).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 71% probability of exploitation in the next 30 days.
- Fixed versions are available, including slideshow-gallery 1.4.7, Tibulant Slideshow Gallery 1.4.6.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
71%
Higher than 99.3% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2014-5460 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.
Affected Products
8 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Tibulant Slideshow GalleryTribulant | 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4 | 1.4.6 |
| slideshow-gallerywordpress-plugin | See advisory | 1.4.7 |
Patched Releases
slideshow-gallery
1.4.7
Tibulant Slideshow Gallery
1.4.6
Timeline
Publicly disclosed
Aug 28, 2014
Last updated
Aug 6, 2024
Weakness Type
- CWE-20 Improper Input Validation
- CWE-434 Unrestricted Upload of File with Dangerous Type
References
- advisoryhttps://www.wordfence.com/threat-intel/vulnerabilities/id/068cb509-7451-4f2f-a65c-ed7686c6f6d7?source=api-prod
- advisoryhttps://www.wordfence.com/threat-intel/vulnerabilities/id/068cb509-7451-4f2f-a65c-ed7686c6f6d7?source=api-scan
- patchhttps://wordpress.org/plugins/slideshow-gallery/changelog
- exploithttp://packetstormsecurity.com/files/128069/WordPress-Slideshow-Gallery-1.4.6-Shell-Upload.html
- exploitMSF wp_slideshowgallery_upload.rb
FAQ
Common Questions.
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.
Affected: Tibulant Slideshow Gallery (Tribulant) versions 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4; slideshow-gallery (wordpress-plugin). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including slideshow-gallery 1.4.7, Tibulant Slideshow Gallery 1.4.6.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2014-5460 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo