Unrestricted file upload

2012-06-2721:55:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

JSON

Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts.

CPENameOperatorVersion
font_uploadereq1.2.4

CPE	Name	Operator	Version
	font_uploader	eq	1.2.4

References

osvdb.org/82657

secunia.com/advisories/49327

www.exploit-db.com/exploits/18994