PT-2014-7222 · Infusionsoft · Infusionsoft Gravity Forms

G0Blin · Published 2014-09-26 · Updated 2015-10-01 · CVE-2014-6446

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Infusionsoft Gravity Forms plugin versions 1.5.3 through 1.5.10

Description The issue allows remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to "utilities/code generator.php". This is due to improper access restriction.

Recommendations For versions 1.5.3 through 1.5.10, consider restricting access to the "utilities/code generator.php" endpoint until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2014-6446

Affected Products

Infusionsoft Gravity Forms

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_infusionsoft_upload.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/131002/Wordpress-InfusionSoft-Shell-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/34925 · Exploit
• 🔥 http://exploit-db.com/exploits/34925 · Exploit
• 🔥 http://research.g0blin.co.uk/cve-2014-6446 · Exploit
• https://wordpress.org/plugins/infusionsoft/changelog · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-6446 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6446 · Note
• http://osvdb.org/show/osvdb/112171 · Note