CVE-2013-5961

2013-09-3022:55:03

mitre

web.nvd.nist.gov

cve-2013-5961

wordpress

lazyseo.php

file upload

vulnerability

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.126

Percentile

95.5%

JSON

Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in lazy-seo/.

Affected configurations

Nvd

Node

danny_morrislazy_seoMatch1.1.9

AND

wordpresswordpressMatch-

VendorProductVersionCPE
danny_morrislazy_seo1.1.9cpe:2.3:a:danny_morris:lazy_seo:1.1.9:*:*:*:*:*:*:*
wordpresswordpress-cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*