CVE-2012-3578

Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct...

PT-2012-4824

Name of the Vulnerable Software and Affected Versions FCChat Widget plugin versions 2.2.13.1 and earlier for WordPress Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a...

WordPress FCChat Widget Plugin 2.2.x - Arbitrary File Upload

FCChat Widget plugin's "Upload.php" is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also...