Unrestricted file upload

2013-09-3022:55:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.102 Low

EPSS

Percentile

95.0%

JSON

Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/wpdb/.

CPENameOperatorVersion
simple_dropbox_upload_formle1.8.8
simple_dropbox_upload_formeq0.5.0
simple_dropbox_upload_formeq1.0.0
simple_dropbox_upload_formeq1.1.0
simple_dropbox_upload_formeq1.1.1
simple_dropbox_upload_formeq1.1.2
simple_dropbox_upload_formeq1.2.0
simple_dropbox_upload_formeq1.3.0
simple_dropbox_upload_formeq1.3.1
simple_dropbox_upload_formeq1.4.0

Name	Operator	Version
simple_dropbox_upload_form	le	1.8.8
simple_dropbox_upload_form	eq	0.5.0
simple_dropbox_upload_form	eq	1.0.0
simple_dropbox_upload_form	eq	1.1.0
simple_dropbox_upload_form	eq	1.1.1
simple_dropbox_upload_form	eq	1.1.2
simple_dropbox_upload_form	eq	1.2.0
simple_dropbox_upload_form	eq	1.3.0
simple_dropbox_upload_form	eq	1.3.1
simple_dropbox_upload_form	eq	1.4.0