CVE-2012-3814

CVE-2012-3814 affects the Font Uploader WordPress plugin (version 1.2.4). The vulnerability is an unrestricted file upload in font-upload.php, enabling remote attackers to upload a PHP file with a .php.ttf extension and then access it under font-uploader/fonts, leading to arbitrary PHP code execu...

CVE-2012-3814: Undefined Security Weakness

Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts...

PT-2012-5016

Name of the Vulnerable Software and Affected Versions Font Uploader plugin version 1.2.4 Description The issue allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension to the font-upload.php file in the Font Uploader plugin, and then accessing it via...