CVE-2012-3575 RBX Gallery < 3.1 - Arbitrary File Upload
HighCVSS 10.0
EPSS 15.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rbx gallery | = 2.1 | No fix listed |
| wordpress rbxgallery(WordPress) | < 3.1 | 3.1 |
References
- 49463 third-party-advisory vendor-advisory
- 19019 exploit
- www.opensyscom.fr exploit
- rbxgallery-uploader-file-upload(76170) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org