PT-2014-7222 · Infusionsoft · Infusionsoft Gravity Forms

G0Blin · Publicado 2014-09-26 · Atualizado 2015-10-01 · CVE-2014-6446

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Infusionsoft Gravity Forms plugin versions 1.5.3 through 1.5.10

Description The issue allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to "utilities/code generator.php". This is due to improper access restriction.

Recommendations For versions 1.5.3 through 1.5.10, consider restricting access to the "utilities/code generator.php" endpoint until a patch is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2014-6446

Produtos afetados

Infusionsoft Gravity Forms

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_infusionsoft_upload.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/131002/Wordpress-InfusionSoft-Shell-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/34925 · Exploit
• 🔥 http://exploit-db.com/exploits/34925 · Exploit
• 🔥 http://research.g0blin.co.uk/cve-2014-6446 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6446 · Nota
• https://wordpress.org/plugins/infusionsoft/changelog · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2014-6446 · Nota de Segurança
• http://osvdb.org/show/osvdb/112171 · Nota