PT-2017-6351 · Unknown · Photo Gallery

Publicado 2017-08-28 · Atualizado 2019-07-08 · CVE-2014-9312

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Photo Gallery version 1.2.5

Description The issue is related to an Unrestricted File Upload vulnerability.

Recommendations For Photo Gallery version 1.2.5, update to a newer version that contains a fix for this issue.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2014-9312

Produtos afetados

Photo Gallery

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_photo_gallery_unrestricted_file_upload.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/130384/WordPress-Photo-Gallery-1.2.5-Unrestricted-File-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/35916 · Exploit
• 🔥 http://packetstormsecurity.com/files/130104/Photo-Gallery-1.2.5-Shell-Upload.html · Exploit
• http://securityfocus.com/bid/72620 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9312 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9312 · Nota de Segurança