NVD Vulnerability Detail

CVE-2014-2558

Summary	The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.
Publication Date	May 6, 2014, 11:55 p.m.
Registration Date	Jan. 26, 2021, 3:08 p.m.
Last Update	Nov. 21, 2024, 11:06 a.m.

CVSS2.0 : MEDIUM
Score	6.5
Vector	AV:N/AC:L/Au:S/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	単一
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:skyphe:file-gallery:1.7:rc6::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.5.6:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc5::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.4.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.8:b2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5:beta2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.4:rc2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.4:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7:rc10::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc7::::wordpress::*
cpe:2.3:a:skyphe:file-gallery::::::wordpress::*		1.7.9
cpe:2.3:a:skyphe:file-gallery:1.5:b::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.8:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7.6:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5:rc1::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5:b3::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc9::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.5.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.7:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc8::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc11::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7:rc14::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.0.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.6:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc4::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.9:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc12::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.5:a::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.6:beta::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.5.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.8:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.7:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5:b2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5:beta1::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc13::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.8:b1::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.4.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc3::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6:::::wordpress::

Related information, measures and tools

No	URL	タグ
1	http://seclists.org/fulldisclosure/2014/Apr/305	Exploit
2	http://seclists.org/fulldisclosure/2014/Apr/305	Exploit
3	http://wordpress.org/plugins/file-gallery/changelog/	Patch
4	http://wordpress.org/plugins/file-gallery/changelog/	Patch
5	http://www.securityfocus.com/bid/67120
6	http://www.securityfocus.com/bid/67120
7	http://www.securityfocus.com/bid/67183
8	http://www.securityfocus.com/bid/67183

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-94	コード・インジェクション	https://cwe.mitre.org/data/definitions/94.html

JVN Vulnerability Information

WordPress 用 File Gallery プラグインにおける任意の PHP コードを実行される脆弱性

Title	WordPress 用 File Gallery プラグインにおける任意の PHP コードを実行される脆弱性
Summary	WordPress 用 File Gallery プラグインは、文字列を適切にエスケープしないため、任意の PHP コードを実行される脆弱性が存在します。
Possible impacts	リモートの管理者により、/wp-admin/options-media.php の設定フィールド内の \' (バックスラッシュクォート) を介して、任意の PHP コードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 13, 2014, midnight
Registration Date	May 8, 2014, 2:05 p.m.
Last Update	May 8, 2014, 2:05 p.m.

Affected System

Skyphe.org

File Gallery 1.7.9.2 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-2558	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2558
National Vulnerability Database (NVD)
2	CVE-2014-2558	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2558

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-94	https://jvndb.jvn.jp/ja/cwe/CWE-94.html

ベンダー情報

No	Name	URL
Skyphe.org
1	Top Page	http://skyphe.org/
WordPress Plugin Directory
2	File Gallery	http://wordpress.org/plugins/file-gallery/changelog/

その他

No	Name	URL
関連文書
1	Arbitrary code execution by admins in File Gallery 1.7.7 (WordPress plugin)	http://seclists.org/fulldisclosure/2014/Apr/305

Change Log

No	Changed Details	Date of change
0	[2014年05月08日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:skyphe:file-gallery:1.7:rc6::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.5.6:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc5::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.4.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.8:b2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5:beta2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.4:rc2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.4:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7:rc10::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc7::::wordpress::*
cpe:2.3:a:skyphe:file-gallery::::::wordpress::*		1.7.9
cpe:2.3:a:skyphe:file-gallery:1.5:b::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.8:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7.6:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5:rc1::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5:b3::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc9::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.5.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.7:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc8::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc11::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7:rc14::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.0.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.6:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc4::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.5:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.9:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc12::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.5:a::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.6:beta::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6.5.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.8:-::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.7:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5:b2::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5:beta1::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5.3:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc13::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.2:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.5.8:b1::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.7.5.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.4.1:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.6.5.4:::::wordpress::
cpe:2.3:a:skyphe:file-gallery:1.7:rc3::::wordpress::*
cpe:2.3:a:skyphe:file-gallery:1.6:::::wordpress::