CVE-2015-4133
reflex_gallery < 3.1.3 - Unauthenticated Arbitrary PHP File Upload via FileUploader
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2015-4133.
PoCs published by Metasploit, D3Ext, sug4r-wr41th, including Metasploit module exploits/unix/webapp/wp_reflexgallery_file_upload.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary PHP file upload vulnerability in WordPress Reflex Gallery 3.1.3, allowing remote code execution by uploading a malicious PHP file via a multipart form request.
Description
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory.
Exploits (4)
This Metasploit module exploits an arbitrary PHP file upload vulnerability in WordPress Reflex Gallery 3.1.3, allowing remote code execution by uploading a malicious PHP file via a multipart form request.
This is a functional exploit for CVE-2015-4133, targeting the Reflex Gallery WordPress plugin (version 3.1.3) to achieve arbitrary file upload and remote command execution. The script automates the upload of a PHP webshell and provides an interactive shell for command execution, including reverse shell capabilities.
This PoC exploits an arbitrary file upload vulnerability in the ReFlex Gallery WordPress plugin (CVE-2015-4133). It sends a POST request to upload a file via the vulnerable endpoint, bypassing authentication.
This Metasploit module exploits an arbitrary file upload vulnerability in WordPress Reflex Gallery 3.1.3, allowing remote code execution via PHP file upload. It leverages a multipart form data upload to bypass restrictions and deploy a payload.