Beveiligingsadvies

CVE-2012-3578

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-06-17 01:00:00
Laatst bijgewerkt 2024-08-06 20:13:51
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in html/images.