CVE-2012-1205

🗓️ 20 Feb 2012 19:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

CVE-2012-1205 PHP remote file inclusion vulnerability in Relocate Upload plugi

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2012-1205	19 Sep 201100:00	–	circl
Cvelist	CVE-2012-1205	20 Feb 201219:00	–	cvelist
d2	DSquare Exploit Pack: D2SEC_WPRELOCATE	24 Feb 201213:55	–	d2
Dsquare	WordPress Relocate Upload 0.14 RFI	26 Mar 201200:00	–	dsquare
EUVD	EUVD-2012-1233	7 Oct 202500:30	–	euvd
NVD	CVE-2012-1205	24 Feb 201213:55	–	nvd
Patchstack	WordPress Relocate Upload Plugin 0.14 - Remote File Inclusion	19 Sep 201100:00	–	patchstack
Prion	Remote file inclusion	24 Feb 201213:55	–	prion
RedhatCVE	CVE-2012-1205	22 May 202505:41	–	redhatcve

NVD

Node

alanft relocate-uploadRange≤0.14

OR

alanft relocate-uploadMatch0.10

OR

alanft relocate-uploadMatch0.11

AND

wordpress wordpress

Source	Link
securityfocus	www.securityfocus.com/bid/49693
secunia	www.secunia.com/advisories/47976
osvdb	www.osvdb.org/79250
plugins	www.plugins.trac.wordpress.org/changeset/504380/relocate-upload
wordpress	www.wordpress.org/extend/plugins/relocate-upload/changelog/

Parameter	Position	Path	Description	CWE
abspath	query param	wp-content/plugins/relocate-upload/relocate-upload.php	WordPress Relocate Upload Local File Include / Remote File Inclusion vulnerability via abspath parameter in relocate-upload.php (plugin < 0.20) allowing arbitrary PHP code execution.	CWE-94

29 Apr 2026 01:13Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5

EPSS0.01649

cve 2012 1205 php remote file inclusion vulnerability relocate upload wordpress execute arbitrary code url abspath parameter