Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-3814
cve-2012-3814
font-upload.php
font uploader plugin
wordpress
file upload vulnerability
php code execution
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.6%
Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts.
Affected configurations
Node
pippin_williamsonfont_uploaderMatch1.2.4
wordpresswordpressMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| pippin_williamson:font_uploader | pippin williamson font uploader | eq | 1.2.4 |
Related
patchstack
patchstack
WordPress Font Uploader Plugin 1.2.4 - Arbitrary File Upload
2012-06-06 00:00:00
cvelist
cvelist
CVE-2012-3814
2022-10-03 16:15:23
wpvulndb
wpvulndb
Font Uploader 1.2.4 - Arbitrary File Upload
2014-08-01 10:58:41
prion
prion
Unrestricted file upload
2012-06-27 21:55:00
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2012-3814
2012-06-27 21:55:03
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.6%
Related for CVE-2012-3814