CVE

Id
60671  
CVE No.
CVE-2013-0724  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter.  
Phase
Assigned (20130102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
611008 60671 CVE-2013-0724 CONFIRM:http://wordpress.org/plugins/wp-ecommerce-shop-styling/changelog/  View
611009 60671 CVE-2013-0724 BID:57768  View
611010 60671 CVE-2013-0724 URL:http://www.securityfocus.com/bid/57768  View
611011 60671 CVE-2013-0724 OSVDB:89921  View
611012 60671 CVE-2013-0724 URL:http://osvdb.org/89921  View
611013 60671 CVE-2013-0724 SECUNIA:51707  View
611014 60671 CVE-2013-0724 URL:http://secunia.com/advisories/51707  View
611015 60671 CVE-2013-0724 XF:wp-shopstyling-generatepdf-file-include(81931)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24710 JVNDB-2013-006285 Tracker Software PDF-XChange におけるヒープベースのバッファオーバーフローの脆弱性 Tracker Software PDF-XChange には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-0729 60671 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006285.html  View