EUVD-2015-1021

Malware in sbrugna...

VulnCheck KEV: CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

Wordpress csv2wpec-coupon plugin arbitrary file upload vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. csv2wpec-coupon is one of the plugins that provides import/export WP e-commerce coupons. An arbitrary file upload vulnerability exists in version v1.1 of the Wordpress csv2wpec-coupon...

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

Design/Logic Flaw

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000013

The csv2wpec-coupon WordPress plugin version v1.1 is vulnerable to an unauthenticated remote file upload vulnerability. The root cause is that the csv2wpecCoupon_FileUpload.php file fails to properly sanitize user input; while it checks for the x-php mime-type, attackers can bypass this check usi...

CVE-2015-1000013: Unrestricted Upload of File with Dangerous Type

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

PT-2016-3581

Name of the Vulnerable Software and Affected Versions csv2wpec-coupon version 1.1 Description A remote file upload issue has been identified. Recommendations For csv2wpec-coupon version 1.1, update to a newer version that contains a fix for this issue...

Csv2WPeC Coupon <= 1.1 - Unauthenticated Remote File Upload

The code in csv2wpecCouponFileUpload.php does not properly sanitize user input, it checks the file mime-type for type x-php but this can be tricked when using the short code for "; $uploadfile="/var/www/s.pht"; $ch =...