CVE-2014-5460

EPSS 70.9%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Popular PoC on GitHub (2 stars) — exploitation code widely available.

CVSS —EPSS 70.9%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

28 Aug 2014Metasploit module available

01 Sep 2014Public PoC

11 Sep 2014Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.

Affected products

n/a · n/a

public PoCs found — 6

githubgithub.com/F-0x57/CVE-2014-5460★ 2 cve_referencepacketstormsecurity.com/files/128069/WordPress-Slideshow-Gallery-1.4.6-Shell-Upload.htmlunverified cve_referencewww.exploit-db.com/exploits/34514unverified cve_referencewww.exploit-db.com/exploits/34681unverified exploitdbwww.exploit-db.com/exploits/34681unverified exploitdbwww.exploit-db.com/exploits/34514unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/128069/WordPress-Slideshow-Gallery-1.4.6-Shell-Upload.html http://secunia.com/advisories/60074 https://exchange.xforce.ibmcloud.com/vulnerabilities/95676 https://wordpress.org/plugins/slideshow-gallery/changelog http://whitexploit.blogspot.mx/2014/08/wordpress-slideshow-gallery-146-shell.html http://www.exploit-db.com/exploits/34514 http://www.exploit-db.com/exploits/34681 http://www.securityfocus.com/archive/1/533281/100/0/threaded