‫ WordPress wpStoreCart Plugin Arbitrary File Upload Vulnerability

IRCAD2012061967
ID: IRCAD2012061967
Release Date: 2012-06-11
Criticality level: Highly critical
 
Software:
WordPress wpStoreCart Plugin 2.x
 
Description:
Sammy Forgit has discovered a vulnerability in the wpStoreCart plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wp-content/plugins/wpstorecart/php/upload.php script allowing the upload of files with arbitrary extensions to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability is confirmed in version 2.5.29. Prior versions may also be affected.
 
Solution
Update to version 2.5.30.
 
References:
OpenSysCom:
 
Secunia:
 

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 22 خرداد 1391

امتیاز

امتیاز شما
تعداد امتیازها:0