PT-2017-6265 · Pluck · Pluck Cms

Published 2017-03-17 · Updated 2017-03-20 · CVE-2014-8708

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pluck CMS version 4.7.2

Description The issue allows remote attackers to execute arbitrary code via the blog form feature.

Recommendations For Pluck CMS version 4.7.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-8708

Affected Products

Pluck Cms

References · 4

• 🔥 http://rossmarks.uk/whitepapers/pluck_cms_4.7.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8708 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8708 · Note
• http://rossmarks.uk/portfolio.php · Note