CVE-2013-5962

medium · 5.1

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.

5.1

CVSS

14.8%

EPSS (exploit prob.)

97th

EPSS percentile

2013-09-30

Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
envato	complete_gallery_manager_plugin	<= 3.3.3
envato	complete_gallery_manager_plugin	1.0.0
envato	complete_gallery_manager_plugin	1.0.1
envato	complete_gallery_manager_plugin	1.0.2
envato	complete_gallery_manager_plugin	2.0.0
envato	complete_gallery_manager_plugin	2.0.1
envato	complete_gallery_manager_plugin	2.0.2
envato	complete_gallery_manager_plugin	2.0.3
envato	complete_gallery_manager_plugin	3.0.0
envato	complete_gallery_manager_plugin	3.0.1
envato	complete_gallery_manager_plugin	3.1.0
envato	complete_gallery_manager_plugin	3.1.1
envato	complete_gallery_manager_plugin	3.2.0
envato	complete_gallery_manager_plugin	3.2.1
envato	complete_gallery_manager_plugin	3.2.2
envato	complete_gallery_manager_plugin	3.2.3
envato	complete_gallery_manager_plugin	3.2.4
envato	complete_gallery_manager_plugin	3.2.5
envato	complete_gallery_manager_plugin	3.2.6
envato	complete_gallery_manager_plugin	3.2.7
envato	complete_gallery_manager_plugin	3.2.8
envato	complete_gallery_manager_plugin	3.3.0
envato	complete_gallery_manager_plugin	3.3.1
envato	complete_gallery_manager_plugin	3.3.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-5962