Vulnerability in N/a
CVE-2014-8739
Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and b…
EPSS: 0.916 (99.7th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- www.exploit-db.com/exploits/35057/ (x_refsource_MISC)
- www.exploit-db.com/exploits/36811/ (x_refsource_MISC)
- www.openwall.com/lists/oss-security/2014/11/11/4 (x_refsource_MISC)
- www.openwall.com/lists/oss-security/2014/11/11/5 (x_refsource_MISC)
- www.openwall.com/lists/oss-security/2014/11/13/3 (x_refsource_MISC)
- wordpress.org/plugins/sexy-contact-form/changelog/ (x_refsource_MISC)
- osvdb.org/show/osvdb/113669 (x_refsource_MISC)
- osvdb.org/show/osvdb/113673 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2014-8739?
- CVE-2014-8739 is a vulnerability in N/a. Published 2020-02-08.
- Is CVE-2014-8739 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.