jQuery File Upload Plugin Unrestricted file upload vulnerability

緊急 9.8CVE-2014-8739 · GHSA-wxg6-f773-g2f7 · 08/02/2020 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
blueimp/jquery-file-upload Packagist	`= 6.4.4`	修正版なし
creative contact form creative-solutions	`< 1.0.0< 2.0.1`	`1.0.02.0.1`
jquery file upload jquery_file_upload_project	`= 6.4.4`	修正版なし

概要

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute arbitrary code by uploading a PHP file with an PHP extension, then accessing it via a direct request to the file in files/, as exploited in the wild in October 2014.

NVD の説明

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute arbitrary code by uploading a PHP file with an PHP extension, then accessing it via a direct request to the file in files/, as exploited in the wild in October 2014.