CVE-2015-1172 in Holding Pattern
Resumen (Inglés)
Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an unspecified directory.
Reservar
2015-01-17
Divulgación
2015-02-11
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 74158 | Holding Pattern File Upload upload-file.php escalada de privilegios | 434 | Alto | No está definido | CVE-2015-1172 |