NVD

Id
41909  
Name
CVE-2013-7102  
Description
Multiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload-lncthumb.php, and (3) media-upload-sq_button.php in lib/admin/ in the OptimizePress theme before 1.61 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images_comingsoon, images_lncthumbs, or images_optbuttons in wp-content/uploads/optpress/, as exploited in the wild in November 2013.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-23  
Modified Date
2013-12-24  
Seq
2013-7102  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211592 41909 CVE-2013-7102 http://blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html  View
211593 41909 CVE-2013-7102 http://help.optimizepress.com/customer/portal/articles/1381790-important-optimizepress-1-0-security-update  View
211594 41909 CVE-2013-7102 20131215 Re: WordPress OptimizePress Theme - File Upload Vulnerability  View
211595 41909 CVE-2013-7102 http://www.osirt.com/2013/11/wordpress-optimizepress-hack-file-upload-vulnerability/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24133 JVNDB-2013-005708 WordPress 用 OptimizePress テーマの lib/admin/ における任意のコードを実行される脆弱性 WordPress 用 OptimizePress テーマの lib/admin/ の (1) media-upload.php、(2) media-upload-lncthumb.php、および (3) media-upload-sq_button.php には、ファイルをアップロードされることにより、任意のコードを実行される脆弱性が存在します。 CVE-2013-7102 67044 CVE-2013-7102 41909 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005708.html 2013-11-27 2013-12-25 View