CVE

Id
54254  
CVE No.
CVE-2012-1011  
Status
Candidate  
Description
actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20120207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
570171 54254 CVE-2012-1011 BUGTRAQ:20120122 AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload  View
570172 54254 CVE-2012-1011 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0137.html  View
570173 54254 CVE-2012-1011 EXPLOIT-DB:18407  View
570174 54254 CVE-2012-1011 URL:http://www.exploit-db.com/exploits/18407  View
570175 54254 CVE-2012-1011 CONFIRM:http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/  View
570176 54254 CVE-2012-1011 BID:51615  View
570177 54254 CVE-2012-1011 URL:http://www.securityfocus.com/bid/51615  View
570178 54254 CVE-2012-1011 SECUNIA:47659  View
570179 54254 CVE-2012-1011 URL:http://secunia.com/advisories/47659  View
570180 54254 CVE-2012-1011 XF:allwebmenus-actions-file-upload(72640)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20151 JVNDB-2013-001726 MIT Kerberos の鍵配布センタの PKINIT の実装におけるサービス運用妨害 (DoS) の脆弱性 MIT Kerberos の鍵配布センタ (KDC) の PKINIT の実装における、plugins/preauth/pkinit/pkinit_srv.c 内の pkinit_server_return_padata 関数は、不適切な状況においてアジリティ KDF 識別子 (agility KDF identifier) の検出を試みるため、サービス運用妨害 (Null ポインタデリファレンスおよびデーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-1016 54254 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001726.html  View