Lucene search

[email protected]CVE-2011-5051

HistoryJan 04, 2012 - 7:55 p.m.

CVE-2011-5051

2012-01-0419:55:02

[email protected]

web.nvd.nist.gov

cve-2011-5051

unrestricted file upload

wp symposium plugin

remote code execution

nvd

wordpress

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.

Affected configurations

NVD

Node

wpsymposiumwp_symposiumRange≤11.12.08

wpsymposiumwp_symposiumMatch11.9.10

wpsymposiumwp_symposiumMatch11.9.14

wpsymposiumwp_symposiumMatch11.9.17

wpsymposiumwp_symposiumMatch11.9.24

wpsymposiumwp_symposiumMatch11.10.1

wpsymposiumwp_symposiumMatch11.10.8

wpsymposiumwp_symposiumMatch11.10.15

wpsymposiumwp_symposiumMatch11.10.22

wpsymposiumwp_symposiumMatch11.10.29

wpsymposiumwp_symposiumMatch11.11.5

wpsymposiumwp_symposiumMatch11.11.12

wpsymposiumwp_symposiumMatch11.11.19

wpsymposiumwp_symposiumMatch11.11.26

wpsymposiumwp_symposiumMatch11.12.03

AND

wordpresswordpress

CPENameOperatorVersion
wpsymposium:wp_symposiumwpsymposium wp symposiumle11.12.08
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.9.10
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.9.14
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.9.17
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.9.24
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.10.1
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.10.8
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.10.15
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.10.22
wpsymposium:wp_symposiumwpsymposium wp symposiumeq11.10.29

CPE	Name	Operator	Version
wpsymposium:wp_symposium	wpsymposium wp symposium	le	11.12.08
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.9.10
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.9.14
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.9.17
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.9.24
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.10.1
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.10.8
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.10.15
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.10.22
wpsymposium:wp_symposium	wpsymposium wp symposium	eq	11.10.29

Rows per page:

1-10 of 151

References

osvdb.org/78041

osvdb.org/78042

secunia.com/advisories/46097

secunia.com/secunia_research/2011-91/

exchange.xforce.ibmcloud.com/vulnerabilities/72012

wpsymposium-trac.sourcerepo.com/wpsymposium_trac/ticket/265

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

Related for CVE-2011-5051

patchstack1 nvd1 wpvulndb1 prion1 cvelist1