PT-2020-7756 · Creative Solutions · Creative Contact Form

Gianni Angelozzi · Published 2020-02-08 · Updated 2022-05-17 · CVE-2014-8739

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions jQuery File Upload Plugin version 6.4.4 Creative Solutions Creative Contact Form versions prior to 1.0.0 for WordPress Creative Solutions Creative Contact Form versions prior to 2.0.1 for Joomla!

Description The issue allows remote attackers to execute arbitrary code by uploading a PHP file with a PHP extension, then accessing it via a direct request to the file in files/. This has been exploited in the wild in October 2014.

Recommendations For jQuery File Upload Plugin version 6.4.4, update to a version that fixes the unrestricted file upload vulnerability. For Creative Solutions Creative Contact Form before 1.0.0 for WordPress, update to version 1.0.0 or later. For Creative Solutions Creative Contact Form before 2.0.1 for Joomla!, update to version 2.0.1 or later. As a temporary workaround, consider restricting access to the files/ directory to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2014-8739

GHSA-WXG6-F773-G2F7

Affected Products

Creative Contact Form

References · 10

• 🔥 https://exploit-db.com/exploits/36811 · Exploit
• 🔥 https://exploit-db.com/exploits/35057 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8739 · Security Note
• https://osv.dev/vulnerability/GHSA-wxg6-f773-g2f7 · Vendor Advisory
• https://wordpress.org/plugins/sexy-contact-form/changelog · Note
• http://openwall.com/lists/oss-security/2014/11/11/4 · Note
• http://osvdb.org/show/osvdb/113669 · Note
• http://openwall.com/lists/oss-security/2014/11/11/5 · Note
• http://openwall.com/lists/oss-security/2014/11/13/3 · Note
• http://osvdb.org/show/osvdb/113673 · Note