PT-2017-6240 · Grand Flag · Grand Flagallery

Publicado 2017-10-18 · Atualizado 2017-11-08 · CVE-2014-8491

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Grand Flagallery plugin versions prior to 4.25

Description The issue allows remote attackers to obtain the installation path. This can be achieved by sending a request to API endpoints such as "flagallery-skins/banner widget default/gallery.php" or "flash-album-gallery/skins/banner widget default/gallery.php".

Recommendations For Grand Flagallery plugin versions prior to 4.25, update to version 4.25 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-8491

Produtos afetados

Grand Flagallery

Referências · 4

• 🔥 https://g0blin.co.uk/cve-2014-8491 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8491 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8491 · Nota
• https://wpvulndb.com/vulnerabilities/8238 · Nota