CVE

Id
54368  
CVE No.
CVE-2012-1125  
Status
Candidate  
Description
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the directory specified by the folder parameter.  
Phase
Assigned (20120214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
570974 54368 CVE-2012-1125 BUGTRAQ:20120123 Wordpress Kish Guest Posting Plugin 1.0 (uploadify.php) Unrestricted File Upload Vulnerability  View
570975 54368 CVE-2012-1125 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0145.html  View
570976 54368 CVE-2012-1125 EXPLOIT-DB:18412  View
570977 54368 CVE-2012-1125 URL:http://www.exploit-db.com/exploits/18412  View
570978 54368 CVE-2012-1125 MLIST:[oss-security] 20120306 CVE-request: Kish Guest Posting Plugin for WordPress File Upload Remote PHP Code Execution  View
570979 54368 CVE-2012-1125 URL:http://www.openwall.com/lists/oss-security/2012/03/06/3  View
570980 54368 CVE-2012-1125 MLIST:[oss-security] 20120306 Re: CVE-request: Kish Guest Posting Plugin for WordPress File Upload Remote PHP Code Execution  View
570981 54368 CVE-2012-1125 URL:http://www.openwall.com/lists/oss-security/2012/03/06/11  View
570982 54368 CVE-2012-1125 MLIST:[oss-security] 20120308 Re: CVE-request: Kish Guest Posting Plugin for WordPress File Upload Remote PHP Code Execution  View
570983 54368 CVE-2012-1125 URL:http://www.openwall.com/lists/oss-security/2012/03/08/1  View
570984 54368 CVE-2012-1125 CONFIRM:http://plugins.svn.wordpress.org/kish-guest-posting/trunk/readme.txt  View
570985 54368 CVE-2012-1125 CONFIRM:http://plugins.trac.wordpress.org/changeset/403694/kish-guest-posting/trunk/uploadify/scripts/uploadify.php  View
570986 54368 CVE-2012-1125 BID:51638  View
570987 54368 CVE-2012-1125 URL:http://www.securityfocus.com/bid/51638  View
570988 54368 CVE-2012-1125 OSVDB:78479  View
570989 54368 CVE-2012-1125 URL:http://www.osvdb.org/78479  View
570990 54368 CVE-2012-1125 SECUNIA:47688  View
570991 54368 CVE-2012-1125 URL:http://secunia.com/advisories/47688  View
570992 54368 CVE-2012-1125 XF:wp-kishguest-uploadify-file-upload(79563)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26437 JVNDB-2012-002144 Mozilla Firefox Mobile およびその他の製品で使用される FreeType におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox Mobile およびその他の製品で使用される FreeType には、サービス運用妨害 (不正なヒープ読み込み操作およびメモリ破損) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-1130 54368 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002144.html  View