RCE in Skyphe File-Gallery
CVE-2014-2558
The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.017 (75.5th percentile) — read the EPSS interpretation.
Affected products
- Skyphe File-gallery — versions 1.1, 1.2, 1.3
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2014-2558?
- CVE-2014-2558 is a vulnerability in Skyphe File-Gallery, classified under Code Injection. Published 2014-05-06.
- Is CVE-2014-2558 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.