WordPress WP file upload and manager by N-Media Plugin Arbitrary File Upload Vulnerability
BID:70145
Info
WordPress WP file upload and manager by N-Media Plugin Arbitrary File Upload Vulnerability
| Bugtraq ID: | 70145 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-5324 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 25 2014 12:00AM |
| Updated: | Sep 25 2014 12:00AM |
| Credit: | Yuji Tounai |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
WordPress WP file upload and manager by N-Media Plugin Arbitrary File Upload Vulnerability
The WP file upload and manager by N-Media plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
Versions prior to WP file upload and manager by N-Media 3.4 is vulnerable.
The WP file upload and manager by N-Media plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
Versions prior to WP file upload and manager by N-Media 3.4 is vulnerable.
Exploit / POC
WordPress WP file upload and manager by N-Media Plugin Arbitrary File Upload Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
WordPress WP file upload and manager by N-Media Plugin Arbitrary File Upload Vulnerability
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
References
WordPress WP file upload and manager by N-Media Plugin Arbitrary File Upload Vulnerability
References:
References: