CVE-2014-9312

This exploit demonstrates an unrestricted file upload vulnerability in Photo Gallery 1.2.5, allowing any registered user (even Subscriber) to upload malicious files via a crafted form submission to admin-ajax.php. The uploaded files are then accessible in a predictable directory, enabling remote code execution.

This Metasploit module exploits an unrestricted file upload vulnerability in the WordPress Photo Gallery plugin (CVE-2014-9312), allowing remote code execution by uploading a malicious PHP file disguised as a ZIP archive. The exploit authenticates with WordPress, uploads the payload, and triggers execution via a GET request.