Lucene search

K
cvelistMitreCVELIST:CVE-2012-5318
HistoryOct 08, 2012 - 5:00 p.m.

CVE-2012-5318

2012-10-0817:00:00
mitre
www.cve.org
1
vulnerability
file upload
wordpress

AI Score

7.7

Confidence

Low

EPSS

0.042

Percentile

92.4%

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified by the folder parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1125.

AI Score

7.7

Confidence

Low

EPSS

0.042

Percentile

92.4%