CVE-2013-5962 (GCVE-0-2013-5962)
Vulnerability from cvelistv5 – Published: 2013-09-30 16:00 – Updated: 2024-08-06 17:29
VLAI?
Summary
Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T17:29:42.172Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/123303"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.vulnerability-lab.com/get_content.php?id=1080"
},
{
"name": "28377",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "http://www.exploit-db.com/exploits/28377"
},
{
"name": "completegallery-uploadimages-file-upload(87172)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87172"
},
{
"name": "20130918 Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html"
},
{
"name": "54894",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/54894"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-09-17T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/123303"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.vulnerability-lab.com/get_content.php?id=1080"
},
{
"name": "28377",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "http://www.exploit-db.com/exploits/28377"
},
{
"name": "completegallery-uploadimages-file-upload(87172)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87172"
},
{
"name": "20130918 Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html"
},
{
"name": "54894",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/54894"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-5962",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://packetstormsecurity.com/files/123303",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/123303"
},
{
"name": "http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606",
"refsource": "CONFIRM",
"url": "http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606"
},
{
"name": "http://www.vulnerability-lab.com/get_content.php?id=1080",
"refsource": "MISC",
"url": "http://www.vulnerability-lab.com/get_content.php?id=1080"
},
{
"name": "28377",
"refsource": "EXPLOIT-DB",
"url": "http://www.exploit-db.com/exploits/28377"
},
{
"name": "completegallery-uploadimages-file-upload(87172)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87172"
},
{
"name": "20130918 Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html"
},
{
"name": "54894",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/54894"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-5962",
"datePublished": "2013-09-30T16:00:00",
"dateReserved": "2013-09-30T00:00:00",
"dateUpdated": "2024-08-06T17:29:42.172Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:*:rev39177:*:*:*:*:*:*\", \"versionEndIncluding\": \"3.3.3\", \"matchCriteriaId\": \"7B80345E-28A9-4BFD-BDA2-178400C886BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.0:rev25273:*:*:*:*:*:*\", \"matchCriteriaId\": \"AA8A5129-8FA2-444F-963E-620C6E060BF3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.1:rev25421:*:*:*:*:*:*\", \"matchCriteriaId\": \"15E37F26-3D33-4009-8135-A39EAC6C059C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.2:rev25487:*:*:*:*:*:*\", \"matchCriteriaId\": \"98A5023C-92CC-4507-8C43-3641F0C47009\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.0:rev27524:*:*:*:*:*:*\", \"matchCriteriaId\": \"69CBAC35-647E-4C97-8B6C-DCCDA537A817\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.1:rev27876:*:*:*:*:*:*\", \"matchCriteriaId\": \"2CAD2537-E00B-479F-9BC6-ED6AF3C84723\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.2:rev28693:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D2833AE-BBEF-40B1-B1DB-F975723EA964\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.3:rev28734:*:*:*:*:*:*\", \"matchCriteriaId\": \"BC227939-DA26-4CDC-B585-9C4285B51D22\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.0.0:rev29469:*:*:*:*:*:*\", \"matchCriteriaId\": \"45CAAD88-A113-4E17-B38D-D4BBA22BD460\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.0.1:rev29536:*:*:*:*:*:*\", \"matchCriteriaId\": \"5670D69E-72A6-455A-B27C-5D9CAD619891\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.1.0:rev30003:*:*:*:*:*:*\", \"matchCriteriaId\": \"E1C37874-B7A6-41AE-8C35-DCFD12A51F53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.1.1:rev30900:*:*:*:*:*:*\", \"matchCriteriaId\": \"88085F1E-D21C-40B3-8B49-3C2DE949C443\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.0:rev31030:*:*:*:*:*:*\", \"matchCriteriaId\": \"0142B545-D533-4BB9-AB46-94F6A2064C76\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.1:rev33197:*:*:*:*:*:*\", \"matchCriteriaId\": \"81CBBDEA-7D4E-4F14-AFED-809A83C2FEE8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.2:rev33971:*:*:*:*:*:*\", \"matchCriteriaId\": \"A1CDE85E-A840-4EFA-95E3-28802DAC7F3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.3:rev34390:*:*:*:*:*:*\", \"matchCriteriaId\": \"3138F8FA-F730-4033-A9C1-DC5D9C13E770\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.4:rev34757:*:*:*:*:*:*\", \"matchCriteriaId\": \"255B4BEE-4B16-46B9-9C9E-2B1445324608\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.5:rev34942:*:*:*:*:*:*\", \"matchCriteriaId\": \"57D17A89-0900-4698-A712-019DD6D1621D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.6:rev36235:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9A377F3-402B-4352-97FA-A197EA1473B2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.7:rev36257:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2291CA0-E34C-4F05-8562-42531408A069\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.8:rev36369:*:*:*:*:*:*\", \"matchCriteriaId\": \"A11F741C-B25A-48AD-8422-2610C8F6521F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.0:rev36620:*:*:*:*:*:*\", \"matchCriteriaId\": \"236C0710-63DE-4D24-A8AC-E8ADC397DE3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.1:rev38906:*:*:*:*:*:*\", \"matchCriteriaId\": \"F0C65E85-8134-4A05-AAEA-3A59DD5823B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.2:rev39009:*:*:*:*:*:*\", \"matchCriteriaId\": \"CEF6E553-13F3-4443-918A-9822DBA09CE6\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de subida sin restriccion en frames/upload-images.php en el plugin Complete Gallery Manager anterior a 3.3.4 rev40279 para Wordpress permite a atacantes remotos ejecutar c\\u00f3digo arbitrario subiendo un fichero con extensi\\u00f3n ejecutable y accediendo despu\\u00e9s a el fichero en wp-content/[year]/[month]/.\"}]",
"evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/434.html\n\n\u0027CWE-434: Unrestricted Upload of File with Dangerous Type\u0027",
"id": "CVE-2013-5962",
"lastModified": "2024-11-21T01:58:30.197",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:H/Au:N/C:P/I:P/A:P\", \"baseScore\": 5.1, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 4.9, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2013-09-30T22:55:03.133",
"references": "[{\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://packetstormsecurity.com/files/123303\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://secunia.com/advisories/54894\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.exploit-db.com/exploits/28377\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.vulnerability-lab.com/get_content.php?id=1080\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/87172\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://packetstormsecurity.com/files/123303\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://secunia.com/advisories/54894\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.exploit-db.com/exploits/28377\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vulnerability-lab.com/get_content.php?id=1080\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/87172\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2013-5962\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2013-09-30T22:55:03.133\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de subida sin restriccion en frames/upload-images.php en el plugin Complete Gallery Manager anterior a 3.3.4 rev40279 para Wordpress permite a atacantes remotos ejecutar c\u00f3digo arbitrario subiendo un fichero con extensi\u00f3n ejecutable y accediendo despu\u00e9s a el fichero en wp-content/[year]/[month]/.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:P/I:P/A:P\",\"baseScore\":5.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":4.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:*:rev39177:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.3.3\",\"matchCriteriaId\":\"7B80345E-28A9-4BFD-BDA2-178400C886BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.0:rev25273:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA8A5129-8FA2-444F-963E-620C6E060BF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.1:rev25421:*:*:*:*:*:*\",\"matchCriteriaId\":\"15E37F26-3D33-4009-8135-A39EAC6C059C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:1.0.2:rev25487:*:*:*:*:*:*\",\"matchCriteriaId\":\"98A5023C-92CC-4507-8C43-3641F0C47009\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.0:rev27524:*:*:*:*:*:*\",\"matchCriteriaId\":\"69CBAC35-647E-4C97-8B6C-DCCDA537A817\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.1:rev27876:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CAD2537-E00B-479F-9BC6-ED6AF3C84723\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.2:rev28693:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D2833AE-BBEF-40B1-B1DB-F975723EA964\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:2.0.3:rev28734:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC227939-DA26-4CDC-B585-9C4285B51D22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.0.0:rev29469:*:*:*:*:*:*\",\"matchCriteriaId\":\"45CAAD88-A113-4E17-B38D-D4BBA22BD460\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.0.1:rev29536:*:*:*:*:*:*\",\"matchCriteriaId\":\"5670D69E-72A6-455A-B27C-5D9CAD619891\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.1.0:rev30003:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1C37874-B7A6-41AE-8C35-DCFD12A51F53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.1.1:rev30900:*:*:*:*:*:*\",\"matchCriteriaId\":\"88085F1E-D21C-40B3-8B49-3C2DE949C443\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.0:rev31030:*:*:*:*:*:*\",\"matchCriteriaId\":\"0142B545-D533-4BB9-AB46-94F6A2064C76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.1:rev33197:*:*:*:*:*:*\",\"matchCriteriaId\":\"81CBBDEA-7D4E-4F14-AFED-809A83C2FEE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.2:rev33971:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1CDE85E-A840-4EFA-95E3-28802DAC7F3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.3:rev34390:*:*:*:*:*:*\",\"matchCriteriaId\":\"3138F8FA-F730-4033-A9C1-DC5D9C13E770\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.4:rev34757:*:*:*:*:*:*\",\"matchCriteriaId\":\"255B4BEE-4B16-46B9-9C9E-2B1445324608\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.5:rev34942:*:*:*:*:*:*\",\"matchCriteriaId\":\"57D17A89-0900-4698-A712-019DD6D1621D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.6:rev36235:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9A377F3-402B-4352-97FA-A197EA1473B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.7:rev36257:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2291CA0-E34C-4F05-8562-42531408A069\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.2.8:rev36369:*:*:*:*:*:*\",\"matchCriteriaId\":\"A11F741C-B25A-48AD-8422-2610C8F6521F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.0:rev36620:*:*:*:*:*:*\",\"matchCriteriaId\":\"236C0710-63DE-4D24-A8AC-E8ADC397DE3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.1:rev38906:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0C65E85-8134-4A05-AAEA-3A59DD5823B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:envato:complete_gallery_manager_plugin:3.3.2:rev39009:*:*:*:*:*:*\",\"matchCriteriaId\":\"CEF6E553-13F3-4443-918A-9822DBA09CE6\"}]}]}],\"references\":[{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://packetstormsecurity.com/files/123303\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://secunia.com/advisories/54894\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.exploit-db.com/exploits/28377\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vulnerability-lab.com/get_content.php?id=1080\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/87172\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://packetstormsecurity.com/files/123303\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://secunia.com/advisories/54894\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.exploit-db.com/exploits/28377\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vulnerability-lab.com/get_content.php?id=1080\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/87172\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"evaluatorComment\":\"Per: http://cwe.mitre.org/data/definitions/434.html\\n\\n\u0027CWE-434: Unrestricted Upload of File with Dangerous Type\u0027\"}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…