6 matches found
CVE-2014-9308
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart aka WordPress Shopping Cart plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a...
CVE-2014-9308: Undefined Security Weakness
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart aka WordPress Shopping Cart plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a...
WordPress plugin Shopping Cart 'banneruploaderscript.php' arbitrary file upload vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin Shopping Cart 'banneruploaderscript.php' because the...
PT-2015-4181
Name of the Vulnerable Software and Affected Versions WP EasyCart plugin versions prior to 3.0.9 Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the products/banners/ directory, then accessing it via a direct...
WordPress Shopping Cart 3.0.4 - Unrestricted File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Shopping Cart 3.0.4 Unrestricted File Upload Date: 29-10-2014 Software Link: https://wordpress.org/plugins/wp-easycart/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...