CVE

Id
67049  
CVE No.
CVE-2013-7102  
Status
Candidate  
Description
Multiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload-lncthumb.php, and (3) media-upload-sq_button.php in lib/admin/ in the OptimizePress theme before 1.61 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images_comingsoon, images_lncthumbs, or images_optbuttons in wp-content/uploads/optpress/, as exploited in the wild in November 2013.  
Phase
Assigned (20131214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
648084 67049 CVE-2013-7102 FULLDISC:20131215 Re: WordPress OptimizePress Theme - File Upload Vulnerability  View
648085 67049 CVE-2013-7102 URL:http://seclists.org/fulldisclosure/2013/Dec/127  View
648086 67049 CVE-2013-7102 MISC:http://blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html  View
648087 67049 CVE-2013-7102 MISC:http://www.osirt.com/2013/11/wordpress-optimizepress-hack-file-upload-vulnerability/  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24270 JVNDB-2013-005845 Icinga の cmd.cgi におけるクロスサイトリクエストフォージェリの脆弱性 Icinga の cmd.cgi には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-7107 67049 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005845.html  View