CVE-2015-1172 in Holding Pattern
摘要 (英语)
Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an unspecified directory.
预定
2015-01-17
披露
2015-02-11
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 74158 | Holding Pattern File Upload upload-file.php 权限提升 | 434 | 高 | 未定义 | CVE-2015-1172 |