PT-2014-6340 · WordPress · Gallery Objects

Published 2014-08-12 · Updated 2015-09-08 · CVE-2014-5201

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gallery Objects plugin version 0.4 for WordPress

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the viewid parameter in a go view object action to the /wp-admin/admin-ajax.php API endpoint.

Recommendations For Gallery Objects plugin version 0.4, consider disabling the go view object action or restricting access to the /wp-admin/admin-ajax.php API endpoint until a patch is available. Avoid using the viewid parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-5201

Affected Products

Gallery Objects

References · 6

• 🔥 http://securityfocus.com/bid/68791 · Exploit
• 🔥 https://exploit-db.com/exploits/34105 · Exploit
• 🔥 http://packetstormsecurity.com/files/127533/WordPress-Gallery-Objects-0.4-SQL-Injection.html · Exploit
• 🔥 http://homelab.it/index.php/2014/07/18/wordpress-gallery-objects-0-4-sql-injection/#sthash.ftMVwBVK.dpbs · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5201 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5201 · Note