exploitDog

CVE-2012-3577

Опубликовано: 17 июн. 2012

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:nmedia:member_conversation:*:*:*:*:*:*:*:*

Версия до 1.3 (включая)

cpe:2.3:a:nmedia:member_conversation:1.0:*:*:*:*:*:*:*

cpe:2.3:a:nmedia:member_conversation:1.2:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.25553

Средний

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-w3gc-6887-36p6

github

около 3 лет назад

Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.

EPSS

Процентиль: 96%

0.25553

Средний

7.5 High

CVSS2

Дефекты

CWE-264

Уязвимость CVE-2012-3577