CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote…

published September 30, 2013

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14771 · 96.7th percentile
Published
2013-09-30T16:00Z
EPSS history
Timeline
  • 30 SEP 16:00Z
    Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote…
    cvelistv5