فا

‫ WordPress Sitemile Auctions Plugin Arbitrary File Upload Vulnerability

IRCAD2012062009
ID: IRCAD2012062009
Release Date: 2012-06-19
Criticality level: Highly critical
Software:
WordPress Sitemile Auctions Plugin 2.x
Description:
Sammy Forgit has reported a vulnerability in the Sitemile Auctions Plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wp-content/plugins/auctionPlugin/upload.php script allowing the upload of files with arbitrary extensions to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability is reported in version 2.0.1.3. Other versions may also be affected.
Solution
Update to version 2.0.2.
References:
OpenSysCom:
Secunia:

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 31 خرداد 1391

امتیاز

امتیاز شما
تعداد امتیازها: 0