CVE

Id
52963  
CVE No.
CVE-2011-5051  
Status
Candidate  
Description
Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.  
Phase
Assigned (20120104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561232 52963 CVE-2011-5051 MISC:http://secunia.com/secunia_research/2011-91/  View
561233 52963 CVE-2011-5051 CONFIRM:https://wpsymposium-trac.sourcerepo.com/wpsymposium_trac/ticket/265  View
561234 52963 CVE-2011-5051 OSVDB:78041  View
561235 52963 CVE-2011-5051 URL:http://osvdb.org/78041  View
561236 52963 CVE-2011-5051 OSVDB:78042  View
561237 52963 CVE-2011-5051 URL:http://osvdb.org/78042  View
561238 52963 CVE-2011-5051 SECUNIA:46097  View
561239 52963 CVE-2011-5051 URL:http://secunia.com/advisories/46097  View
561240 52963 CVE-2011-5051 XF:wpsymposium-admin-profile-file-upload(72012)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33376 JVNDB-2011-003616 MaraDNS の権威サーバにおけるサービス運用妨害 (CPU 資源の消費) の脆弱性 MaraDNS の権威サーバには、ハッシュ衝突を想定した制限を行わずに DNS データのハッシュ値を算出するため、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2011-5056 52963 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003616.html  View