CVE-2012-3575

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2012-06-16

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Rbx Gallery (Rbx Gallery)

References

• http://secunia.com/advisories/49463
• http://www.exploit-db.com/exploits/19019
• http://www.opensyscom.fr/Actualites/wordpress-plugins-rbx-gallery-multiple-arbitrary-file-upload-vulnerability.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76170