Check Point Advisories

WordPress Gmedia Gallery Shell Upload

Check Point Reference: CPAI-2014-1783
Date Published: 16 Sep 2014
Severity: High
Last Updated: Sunday 07 September, 2014
Source: IPS Research Team
Protection Provided by:

Security Gateway
R77

  • R76
  • R75

    		•
    Who is Vulnerable?
    WordPress Gmedia Gallery 1.2.1
    Vulnerability Description Gmedia Gallery plugin is prone to Shell Upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process.

    Protection Overview

    Security Gateway R77 / R76 / R75 / R71 / R70

    1. In the IPS tab, click Protections and find the WordPress Gmedia Gallery Shell Upload protection using the Search tool and Edit the protection's settings.
    2. Install policy on all modules.

    SmartView Tracker will log the following entries:

    Attack Name:  Web Server Enforcement Violation.
    Attack Information:  WordPress Gmedia Gallery Shell Upload

    ×
      Feedback
    This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
    OK