Lucene search
PRIOn knowledge basePRION:CVE-2013-1916HistoryJun 24, 2022 - 3:15 p.m.
Design/Logic Flaw
2022-06-2415:15:00
PRIOn knowledge base
www.prio-n.com
3
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.
| CPE | Name | Operator | Version |
|---|---|---|---|
| user_photo | eq | 0.9.4 |
Related
cvelist
cvelist
CVE-2013-1916
2022-06-24 15:00:17
cve
cve
CVE-2013-1916
2022-06-24 15:15:08
patchstack
patchstack
WordPress User Photo Component - Remote File Upload
2011-02-17 00:00:00
nvd
nvd
CVE-2013-1916
2022-06-24 15:15:08
wpvulndb
wpvulndb
User Photo - Component Remote File Upload
2011-02-17 00:00:00