فا

‫ WordPress Simple Dropbox Upload Plugin Arbitrary File Upload Vulnerability

IRCAD2013092893
ID: IRCAD2013092893
Release Date: 2013-09-17
Criticality level: Highly critical
Software:
WordPress Simple Dropbox Upload Plugin 1.x
Description:
A vulnerability has been discovered in the Simple Dropbox Upload plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wp-content/plugins/simple-dropbox-upload-form/multi.php script allowing the upload of files with arbitrary extensions to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability is confirmed in version 1.8.8. Other versions may also be affected.
Solution
No official solution is currently available.
References:
Secunia

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 27 شهریور 1392

امتیاز

امتیاز شما
تعداد امتیازها: 0