critical10.0Public exploit code
CVE-2012-3575
Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploadi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin RBX Gallery 2.1 - Arbitrary File Upload2012-06-08 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rbx Gallery | Rbx Gallery | Version 2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/49463
- http://www.exploit-db.com/exploits/19019
- http://www.opensyscom.fr/Actualites/wordpress-plugins-rbx-gallery-multiple-arbitrary-file-upload-vulnerability.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76170
- http://secunia.com/advisories/49463
- http://www.exploit-db.com/exploits/19019
- http://www.opensyscom.fr/Actualites/wordpress-plugins-rbx-gallery-multiple-arbitrary-file-upload-vulnerability.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76170