virus logo Intrusion Prevention

WordPress.Plugin.Tribulant.Arbitrary.File.Upload

description-logoDescription

This indicates an attack attempt to exploit a File Upload vulnerability in Wordpress plugin Tribulant.
The vulnerability is caused by a security bypass issue in the Tribulant pulgin. Remote attackers can exploit this to upload arbitrary files on to the Wordpress web folder.

affected-products-logoAffected Products

Tribulant version 1.4.6

Impact logoImpact

Security Bypass: Remote attackers can bypass security checks of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://wordpress.org/plugins/slideshow-gallery/changelog/

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-02-01 14.540 Name:Wordpress.
Plugin.
Tribulant.
Arbitrary.
File.
Upload:WordPress.
Plugin.
Tribulant.
Arbitrary.
File.
Upload

References

http://www.exploit-db.com/exploits/34681/ http://www.exploit-db.com/exploits/34514/
ID 40152
Created Mar 10, 2015
Updated Jan 31, 2019
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2014-5460
Exploit Prediction Score 91.39%
Default Action drop
Active
Affected OS Windows, Linux, MacOS
Affected App PHP_app