Beveiligingsadvies

CVE-2007-3543

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-07-03 20:00:00

Laatst bijgewerkt 2024-08-07 14:21:36

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the _wp_attached_file metadata field; and then sending this file's content, along with its post_ID value, to (1) wp-app.php or (2) app.php.

← Alle CVE's bekijken Bekijk op cve.org ↗