‫ WordPress ReFlex Gallery Plugin Arbitrary File Upload Vulnerability

IRCAD2013012394
ID: IRCAD2013012394
Release Date: 2013-01-02
Criticality level: Highly critical
 
Software:
ReFlex Gallery 1.x (plugin for WordPress)
 
Description:
Sammy Forgit has discovered a vulnerability in the ReFlex Gallery plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wp-content/plugins/reflex-gallery/admin/scripts/FileUploader/php.php script allowing the upload of files with arbitrary extensions to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability has been confirmed in version 1.4. Other versions may also be affected.
 
Solution
No official solution is currently available.
 
References:
 
Secunia:

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 16 دی 1391

امتیاز

امتیاز شما
تعداد امتیازها:0