Lucene search
MitreCVE-2012-1205HistoryFeb 24, 2012 - 1:55 p.m.
CVE-2012-1205
2012-02-2413:55:05
CWE-94
mitre
web.nvd.nist.gov
31
cve
2012
1205
php
remote file inclusion
vulnerability
relocate upload
wordpress
execute
arbitrary code
url
abspath parameter
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.013
Percentile
86.3%
PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
Affected configurations
Node
alanftrelocate-uploadRange≤0.14
ORalanftrelocate-uploadMatch0.10
ORalanftrelocate-uploadMatch0.11
wordpresswordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| alanft | relocate-upload | * | cpe:2.3:a:alanft:relocate-upload:*:*:*:*:*:*:*:* |
| alanft | relocate-upload | 0.10 | cpe:2.3:a:alanft:relocate-upload:0.10:*:*:*:*:*:*:* |
| alanft | relocate-upload | 0.11 | cpe:2.3:a:alanft:relocate-upload:0.11:*:*:*:*:*:*:* |
| wordpress | wordpress | * | cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* |
Related
d2
d2
DSquare Exploit Pack: D2SEC_WPRELOCATE
2012-02-24 13:55:00
dsquare
dsquare
WordPress Relocate Upload 0.14 RFI
2012-03-26 00:00:00
cvelist
cvelist
CVE-2012-1205
2012-02-20 19:00:00
nvd
nvd
CVE-2012-1205
2012-02-24 13:55:05
exploitdb
exploitdb
WordPress Plugin Relocate Upload 0.14 - Remote File Inclusion
2011-09-19 00:00:00
patchstack
patchstack
WordPress Relocate Upload Plugin 0.14 - Remote File Inclusion
2011-09-19 00:00:00
prion
prion
Remote file inclusion
2012-02-24 13:55:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.013
Percentile
86.3%
Related for CVE-2012-1205