Lucene search

[email protected]NVD:CVE-2012-1010

HistoryFeb 07, 2012 - 9:55 p.m.

CVE-2012-1010

2012-02-0721:55:04

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.019

Percentile

88.7%

JSON

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.

Affected configurations

Nvd

Node

liknoallwebmenus_pluginRange≤1.1.7

liknoallwebmenus_pluginMatch1.0.1

liknoallwebmenus_pluginMatch1.0.3

liknoallwebmenus_pluginMatch1.0.4

liknoallwebmenus_pluginMatch1.0.9

liknoallwebmenus_pluginMatch1.0.10

liknoallwebmenus_pluginMatch1.0.11

liknoallwebmenus_pluginMatch1.0.12

liknoallwebmenus_pluginMatch1.0.17

liknoallwebmenus_pluginMatch1.0.18

liknoallwebmenus_pluginMatch1.0.19

liknoallwebmenus_pluginMatch1.0.20

liknoallwebmenus_pluginMatch1.0.21

liknoallwebmenus_pluginMatch1.0.22

liknoallwebmenus_pluginMatch1.0.23

liknoallwebmenus_pluginMatch1.0.24

liknoallwebmenus_pluginMatch1.1.1

liknoallwebmenus_pluginMatch1.1.2

liknoallwebmenus_pluginMatch1.1.3

liknoallwebmenus_pluginMatch1.1.4

liknoallwebmenus_pluginMatch1.1.5

liknoallwebmenus_pluginMatch1.1.6

AND

wordpresswordpress

VendorProductVersionCPE
liknoallwebmenus_plugin*cpe:2.3:a:likno:allwebmenus_plugin:*:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.1cpe:2.3:a:likno:allwebmenus_plugin:1.0.1:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.3cpe:2.3:a:likno:allwebmenus_plugin:1.0.3:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.4cpe:2.3:a:likno:allwebmenus_plugin:1.0.4:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.9cpe:2.3:a:likno:allwebmenus_plugin:1.0.9:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.10cpe:2.3:a:likno:allwebmenus_plugin:1.0.10:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.11cpe:2.3:a:likno:allwebmenus_plugin:1.0.11:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.12cpe:2.3:a:likno:allwebmenus_plugin:1.0.12:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.17cpe:2.3:a:likno:allwebmenus_plugin:1.0.17:*:*:*:*:*:*:*
liknoallwebmenus_plugin1.0.18cpe:2.3:a:likno:allwebmenus_plugin:1.0.18:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
likno	allwebmenus_plugin	*	cpe:2.3:a:likno:allwebmenus_plugin::::::::
likno	allwebmenus_plugin	1.0.1	cpe:2.3:a:likno:allwebmenus_plugin:1.0.1:::::::*
likno	allwebmenus_plugin	1.0.3	cpe:2.3:a:likno:allwebmenus_plugin:1.0.3:::::::*
likno	allwebmenus_plugin	1.0.4	cpe:2.3:a:likno:allwebmenus_plugin:1.0.4:::::::*
likno	allwebmenus_plugin	1.0.9	cpe:2.3:a:likno:allwebmenus_plugin:1.0.9:::::::*
likno	allwebmenus_plugin	1.0.10	cpe:2.3:a:likno:allwebmenus_plugin:1.0.10:::::::*
likno	allwebmenus_plugin	1.0.11	cpe:2.3:a:likno:allwebmenus_plugin:1.0.11:::::::*
likno	allwebmenus_plugin	1.0.12	cpe:2.3:a:likno:allwebmenus_plugin:1.0.12:::::::*
likno	allwebmenus_plugin	1.0.17	cpe:2.3:a:likno:allwebmenus_plugin:1.0.17:::::::*
likno	allwebmenus_plugin	1.0.18	cpe:2.3:a:likno:allwebmenus_plugin:1.0.18:::::::*