PT-2015-4369 · Themepunch · Showbiz Pro+1

Published 2015-06-30 · Updated 2016-11-28 · CVE-2014-9735

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ThemePunch Slider Revolution plugin versions prior to 3.0.96 Showbiz Pro plugin version 1.7.1 and earlier

Description The issue allows remote attackers to upload and execute arbitrary files, delete arbitrary sliders, and create, update, import, or export arbitrary sliders due to improper access restriction to administrator AJAX functionality.

Recommendations For ThemePunch Slider Revolution plugin versions prior to 3.0.96, update to version 3.0.96 or later. For Showbiz Pro plugin version 1.7.1 and earlier, update to a version later than 1.7.1.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-9735

Affected Products

Showbiz Pro

Themepunch Slider Revolution

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_revslider_upload_execute.rb · Exploit
• 🔥 https://exploit-db.com/exploits/36957 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Nov/78 · Exploit
• 🔥 https://whatisgon.wordpress.com/2014/11/30/another-revslider-vulnerability · Exploit
• 🔥 https://blog.sucuri.net/2014/12/revslider-vulnerability-leads-to-massive-wordpress-soaksoak-compromise.html · Exploit
• http://themepunch.com/products/old-revolution-slider-pre-4-2-vulnerabilty-explained · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9735 · Security Note
• https://plugins.trac.wordpress.org/browser/patch-for-revolution-slider/trunk/revsliderpatch.php · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9735 · Note
• http://securityfocus.com/bid/71306 · Note
• https://wpvulndb.com/vulnerabilities/7954 · Note