Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-69816
HistoryApr 18, 2023 - 12:00 a.m.

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin User Submitted Posts, which is caused by incorrect validation of file extensions by the usp_check_images function. An attacker can exploit this vulnerability to upload malicious files and execute arbitrary code on a vulnerable system.

2023-04-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
wordpress
php
mysql
arbitrary file upload
user submitted posts
file validation
bento4
denial of service
open source
c++ library

EPSS

0.001

Percentile

23.7%

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version v1.6.0-639, which stems from the AP4_TrunAtom::SetDataOffset(int) function in Ap4TrunAtom.h containing a segmentation violation. An attacker can exploit this vulnerability to cause a denial of service.

EPSS

0.001

Percentile

23.7%

Related for CNVD-2023-69816