CVE

Id
58561  
CVE No.
CVE-2012-5318  
Status
Candidate  
Description
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified by the folder parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1125.  
Phase
Assigned (20121008)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
600352 58561 CVE-2012-5318 MLIST:[oss-security] 20120308 Re: CVE-request: Kish Guest Posting Plugin for WordPress File Upload Remote PHP Code Execution  View
600353 58561 CVE-2012-5318 URL:http://www.openwall.com/lists/oss-security/2012/03/08/1  View
600354 58561 CVE-2012-5318 SECUNIA:47688  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29122 JVNDB-2012-004829 Xavi X7968 におけるクロスサイトリクエストフォージェリの脆弱性 Xavi X7968 の webconfig/admin_passwd/passwd.html/admin_passwd には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-5323 58561 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004829.html  View