CVE-2011-5051

Опубликовано: 04 янв. 2012

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:wpsymposium:wp_symposium:*:*:*:*:*:*:*:*

Версия до 11.12.08 (включая)

cpe:2.3:a:wpsymposium:wp_symposium:11.9.10:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.9.14:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.9.17:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.9.24:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.10.1:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.10.8:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.10.15:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.10.22:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.10.29:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.11.5:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.11.12:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.11.19:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.11.26:*:*:*:*:*:*:*

cpe:2.3:a:wpsymposium:wp_symposium:11.12.03:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04263

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fcw4-qcmw-m499

github

около 3 лет назад