3 matches found
CVE-2014-5014
The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in imagemagicpath...
CVE-2014-5014: Improper Neutralization of Special Elements used in a Command
The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in imagemagicpath...
PT-2018-4247
Name of the Vulnerable Software and Affected Versions WordPress Flash Uploader plugin versions prior to 3.1.3 Description The issue allows remote attackers to execute arbitrary commands. This is related to invalid characters in the image magic path. Recommendations For WordPress Flash Uploader...