PT-2015-4369 · Themepunch · Showbiz Pro+1

Publicado 2015-06-30 · Atualizado 2016-11-28 · CVE-2014-9735

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ThemePunch Slider Revolution plugin versions prior to 3.0.96 Showbiz Pro plugin version 1.7.1 and earlier

Description The issue allows remote attackers to upload and execute arbitrary files, delete arbitrary sliders, and create, update, import, or export arbitrary sliders due to improper access restriction to administrator AJAX functionality.

Recommendations For ThemePunch Slider Revolution plugin versions prior to 3.0.96, update to version 3.0.96 or later. For Showbiz Pro plugin version 1.7.1 and earlier, update to a version later than 1.7.1.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9735

Produtos afetados

Showbiz Pro

Themepunch Slider Revolution

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_revslider_upload_execute.rb · Exploit
• 🔥 https://exploit-db.com/exploits/36957 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Nov/78 · Exploit
• 🔥 https://whatisgon.wordpress.com/2014/11/30/another-revslider-vulnerability · Exploit
• 🔥 https://blog.sucuri.net/2014/12/revslider-vulnerability-leads-to-massive-wordpress-soaksoak-compromise.html · Exploit
• http://themepunch.com/products/old-revolution-slider-pre-4-2-vulnerabilty-explained · Aviso do Fabricante
• https://plugins.trac.wordpress.org/browser/patch-for-revolution-slider/trunk/revsliderpatch.php · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9735 · Nota
• http://securityfocus.com/bid/71306 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9735 · Nota de Segurança
• https://wpvulndb.com/vulnerabilities/7954 · Nota