Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-9312.
PoCs published by Kacper Szurek, Kacper Szurek, rastating, including Metasploit module exploits/unix/webapp/wp_photo_gallery_unrestricted_file_upload.
AI-analyzed exploit summary This exploit demonstrates an unrestricted file upload vulnerability in Photo Gallery 1.2.5, allowing any registered user (even Subscriber) to upload malicious files via a crafted form submission to admin-ajax.php. The uploaded files are then accessible in a predictable directory, enabling remote code execution.
Description
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
Exploits (2)
This exploit demonstrates an unrestricted file upload vulnerability in Photo Gallery 1.2.5, allowing any registered user (even Subscriber) to upload malicious files via a crafted form submission to admin-ajax.php. The uploaded files are then accessible in a predictable directory, enabling remote code execution.
This Metasploit module exploits an unrestricted file upload vulnerability in the WordPress Photo Gallery plugin (CVE-2014-9312), allowing remote code execution by uploading a malicious PHP file disguised as a ZIP archive. The exploit authenticates with WordPress, uploads the payload, and triggers execution via a GET request.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H