CVE

Id
56820  
CVE No.
CVE-2012-3577  
Status
Candidate  
Description
Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.  
Phase
Assigned (20120616)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
588491 56820 CVE-2012-3577 MISC:http://packetstormsecurity.org/files/113287/WordPress-Nmedia-WP-Member-Conversation-1.35.0-Shell-Upload.html  View
588492 56820 CVE-2012-3577 MISC:http://wordpress.org/extend/plugins/wordpress-member-private-conversation/changelog/  View
588493 56820 CVE-2012-3577 MISC:http://www.opensyscom.fr/Actualites/wordpress-plugins-nmedia-wordpress-member-conversation-shell-upload-vulnerability.html  View
588494 56820 CVE-2012-3577 BID:53790  View
588495 56820 CVE-2012-3577 URL:http://www.securityfocus.com/bid/53790  View
588496 56820 CVE-2012-3577 SECUNIA:49375  View
588497 56820 CVE-2012-3577 URL:http://secunia.com/advisories/49375  View
588498 56820 CVE-2012-3577 XF:wp-nmedia-doupload-file-upload(76076)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28363 JVNDB-2012-004070 Symantec PGP Universal Server における秘密鍵を読まれる脆弱性 Symantec PGP Universal Server は、鍵を検索するリクエストが含まれたセッションを適切に管理しないため、秘密鍵を読まれる脆弱性が存在します。 CVE-2012-3582 56820 2.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004070.html  View