CVE-2012-3575: Critical severity rbx gallery vulnerability
Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3575?
CVE-2012-3575 is considered a high severity vulnerability as it allows remote attackers to execute arbitrary code on the server.
How do I fix CVE-2012-3575?
To fix CVE-2012-3575, update the RBX Gallery plugin to its latest version or remove the plugin if updates are not available.
What impact does CVE-2012-3575 have on the RBX Gallery plugin?
CVE-2012-3575 allows attackers to upload malicious files through the uploader.php script, potentially compromising the entire WordPress installation.
Which versions of the RBX Gallery plugin are affected by CVE-2012-3575?
RBX Gallery plugin version 2.1 is specifically vulnerable to CVE-2012-3575.
Can CVE-2012-3575 affect other plugins or applications?
CVE-2012-3575 is specific to the RBX Gallery plugin and does not directly affect other plugins or applications unless they share a similar vulnerability.