CVE

Id
54253  
CVE No.
CVE-2012-1010  
Status
Candidate  
Description
Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20120207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
570161 54253 CVE-2012-1010 BUGTRAQ:20120122 AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload  View
570162 54253 CVE-2012-1010 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0137.html  View
570163 54253 CVE-2012-1010 EXPLOIT-DB:18407  View
570164 54253 CVE-2012-1010 URL:http://www.exploit-db.com/exploits/18407  View
570165 54253 CVE-2012-1010 CONFIRM:http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/  View
570166 54253 CVE-2012-1010 BID:51615  View
570167 54253 CVE-2012-1010 URL:http://www.securityfocus.com/bid/51615  View
570168 54253 CVE-2012-1010 SECUNIA:47659  View
570169 54253 CVE-2012-1010 URL:http://secunia.com/advisories/47659  View
570170 54253 CVE-2012-1010 XF:allwebmenus-actions-file-upload(72640)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27768 JVNDB-2012-003475 MIT Kerberos の KDC におけるサービス運用妨害 (DoS) の脆弱性 MIT Kerberos の KDC (Key Distribution Center) 内の kdc_handle_protected_negotiation 関数は、チェックサムに対するキータイプの妥当性を確認する前に、チェックサムを計算するため、サービス運用妨害 (未初期化ポインタの解放、ヒープメモリ破損、およびデーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-1015 54253 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003475.html  View