NVD Vulnerability Detail

CVE-2014-8739

Summary	Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute arbitrary code by uploading a PHP file with an PHP extension, then accessing it via a direct request to the file in files/, as exploited in the wild in October 2014.
Publication Date	Feb. 9, 2020, 3:15 a.m.
Registration Date	Jan. 26, 2021, 3:21 p.m.
Last Update	Nov. 21, 2024, 11:19 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:jquery_file_upload_project:jquery_file_upload:6.4.4:::::::*
cpe:2.3:a:creative-solutions:creative_contact_form::::::joomla\!::*				2.0.1
cpe:2.3:a:creative-solutions:creative_contact_form::::::wordpress::*				1.0.0

Related information, measures and tools

No	URL	タグ
1	http://osvdb.org/show/osvdb/113669	Broken Link
2	http://osvdb.org/show/osvdb/113669	Broken Link
3	http://osvdb.org/show/osvdb/113673	Broken Link
4	http://osvdb.org/show/osvdb/113673	Broken Link
5	http://www.openwall.com/lists/oss-security/2014/11/11/4	Mailing List Third Party Advisory
6	http://www.openwall.com/lists/oss-security/2014/11/11/4	Mailing List Third Party Advisory
7	http://www.openwall.com/lists/oss-security/2014/11/11/5	Mailing List Third Party Advisory
8	http://www.openwall.com/lists/oss-security/2014/11/11/5	Mailing List Third Party Advisory
9	http://www.openwall.com/lists/oss-security/2014/11/13/3	Mailing List Third Party Advisory
10	http://www.openwall.com/lists/oss-security/2014/11/13/3	Mailing List Third Party Advisory
11	https://wordpress.org/plugins/sexy-contact-form/changelog/	Third Party Advisory
12	https://wordpress.org/plugins/sexy-contact-form/changelog/	Third Party Advisory
13	https://www.exploit-db.com/exploits/35057/	Exploit Third Party Advisory VDB Entry
14	https://www.exploit-db.com/exploits/35057/	Exploit Third Party Advisory VDB Entry
15	https://www.exploit-db.com/exploits/36811/	Exploit Third Party Advisory VDB Entry
16	https://www.exploit-db.com/exploits/36811/	Exploit Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-434	危険なタイプのファイルの無制限アップロード	https://cwe.mitre.org/data/definitions/434.html

JVN Vulnerability Information

jQuery File Upload プラグインおよび Creative Solutions Creative Contact Form における危険なタイプのファイルの無制限アップロードに関する脆弱性

Title	jQuery File Upload プラグインおよび Creative Solutions Creative Contact Form における危険なタイプのファイルの無制限アップロードに関する脆弱性
Summary	jQuery File Upload プラグイン Creative Solutions Creative Contact Form (旧 Sexy Contact Form) には、危険なタイプのファイルの無制限アップロードに関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Oct. 27, 2014, midnight
Registration Date	Feb. 28, 2020, 12:14 p.m.
Last Update	Feb. 28, 2020, 12:14 p.m.

Affected System

jQuery File Upload project

jQuery File Upload 6.4.4 (jQuery)

Creative-Solutions.net

Creative Contact Form 1.0.0 未満 (WordPress)

Creative Contact Form 2.0.1 未満 (Joomla!)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-8739	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8739
National Vulnerability Database (NVD)
2	CVE-2014-8739	https://nvd.nist.gov/vuln/detail/CVE-2014-8739

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-434	https://cwe.mitre.org/data/definitions/434.html

ベンダー情報

No	Name	URL
GitHub
1	jQuery File Upload	https://github.com/blueimp/jQuery-File-Upload
WordPress Plugin Directory
2	Creative Contact Form	https://wordpress.org/plugins/sexy-contact-form/#developers

その他

No	Name	URL
関連文書
1	EDB-ID:35057 (WordPress Plugin 0.9.7 / Joomla! Component 2.0.0 Creative Contact Form - Arbitrary File Upload)	https://www.exploit-db.com/exploits/35057

Change Log

No	Changed Details	Date of change
1	[2020年02月28日] 掲載	Feb. 28, 2020, 12:14 p.m.