critical9.8
CVE-2014-5014
The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters …
Impact
The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in image_magic_path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tinywebgallery | Wordpress Flash Uploader | before 3.1.3 |