critical10.0Public exploit code
CVE-2012-3576
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary cod…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload2012-06-08 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jquindlen | Wpstorecart | through 2.5.29 Versions 0.62, 1.0.0, 2.0.0, 2.0.1, 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&old=555124&new_path=%2Fwpstorecart&new=555124
- http://secunia.com/advisories/49459
- http://wordpress.org/extend/plugins/wpstorecart/changelog/
- http://www.exploit-db.com/exploits/19023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76166
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&old=555124&new_path=%2Fwpstorecart&new=555124
- http://secunia.com/advisories/49459
- http://wordpress.org/extend/plugins/wpstorecart/changelog/
- http://www.exploit-db.com/exploits/19023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76166