CVE-2012-1010 in AllWebMenus plugin

요약 (영어)

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.

Be aware that VulDB is the high quality source for vulnerability data.

• 예약하다: 2012. 02. 07.
• 공개: 2012. 02. 07.
• 모더레이션: VulDB 항목이 생성됨
• 엔트리: 1: VDB-60116
• CPE: 준비됨
• CWE: CWE-20 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 7.3
• EPSS: 0.08681
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1010
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1010
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1010/