CVE

Id
56819  
CVE No.
CVE-2012-3576  
Status
Candidate  
Description
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.  
Phase
Assigned (20120615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
588484 56819 CVE-2012-3576 EXPLOIT-DB:19023  View
588485 56819 CVE-2012-3576 URL:http://www.exploit-db.com/exploits/19023  View
588486 56819 CVE-2012-3576 CONFIRM:http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&old=555124&new_path=%2Fwpstorecart&new=555124  View
588487 56819 CVE-2012-3576 CONFIRM:http://wordpress.org/extend/plugins/wpstorecart/changelog/  View
588488 56819 CVE-2012-3576 SECUNIA:49459  View
588489 56819 CVE-2012-3576 URL:http://secunia.com/advisories/49459  View
588490 56819 CVE-2012-3576 XF:wpstorecart-upload-file-upload(76166)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28264 JVNDB-2012-003971 Symantec Messaging Gateway における重要な情報を取得される脆弱性 Symantec Messaging Gateway には、コンポーネントバージョンの重要な情報を取得される脆弱性が存在します。 CVE-2012-3581 56819 3.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003971.html  View