CVE

Id
56817  
CVE No.
CVE-2012-3574  
Status
Candidate  
Description
Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/temp.  
Phase
Assigned (20120615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
588470 56817 CVE-2012-3574 EXPLOIT-DB:18997  View
588471 56817 CVE-2012-3574 URL:http://www.exploit-db.com/exploits/18997  View
588472 56817 CVE-2012-3574 MISC:http://www.opensyscom.fr/Actualites/wordpress-plugins-mm-forms-community-shell-upload-vulnerability.html  View
588473 56817 CVE-2012-3574 BID:53852  View
588474 56817 CVE-2012-3574 URL:http://www.securityfocus.com/bid/53852  View
588475 56817 CVE-2012-3574 SECUNIA:49411  View
588476 56817 CVE-2012-3574 URL:http://secunia.com/advisories/49411  View
588477 56817 CVE-2012-3574 XF:wp-mmforms-doajaxfileupload-file-upload(76133)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28262 JVNDB-2012-003969 Symantec Messaging Gateway におけるアクセス権限を取得される脆弱性 Symantec Messaging Gateway は、不特定のアカウントの初期パスワードを保持するため、アクセス権限を取得される脆弱性が存在します。 CVE-2012-3579 56817 7.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003969.html  View