Lucene search

[email protected]NVD:CVE-2011-5051

HistoryJan 04, 2012 - 7:55 p.m.

CVE-2011-5051

2012-01-0419:55:02

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.

Affected configurations

NVD

Node

wpsymposiumwp_symposiumRange≤11.12.08

wpsymposiumwp_symposiumMatch11.9.10

wpsymposiumwp_symposiumMatch11.9.14

wpsymposiumwp_symposiumMatch11.9.17

wpsymposiumwp_symposiumMatch11.9.24

wpsymposiumwp_symposiumMatch11.10.1

wpsymposiumwp_symposiumMatch11.10.8

wpsymposiumwp_symposiumMatch11.10.15

wpsymposiumwp_symposiumMatch11.10.22

wpsymposiumwp_symposiumMatch11.10.29

wpsymposiumwp_symposiumMatch11.11.5

wpsymposiumwp_symposiumMatch11.11.12

wpsymposiumwp_symposiumMatch11.11.19

wpsymposiumwp_symposiumMatch11.11.26

wpsymposiumwp_symposiumMatch11.12.03

AND

wordpresswordpress

References

osvdb.org/78041

osvdb.org/78042

secunia.com/advisories/46097

secunia.com/secunia_research/2011-91/

exchange.xforce.ibmcloud.com/vulnerabilities/72012

wpsymposium-trac.sourcerepo.com/wpsymposium_trac/ticket/265

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

Related for NVD:CVE-2011-5051

wpvulndb1 prion1 cvelist1 cve1 patchstack1