critical9.8Public exploit code
CVE-2013-2010
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin W3 Total Cache - PHP Code Execution (Metasploit)2013-05-01 · remote · php · Verified
Impact
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Automattic | Wp Super Cache | through 1.2 |
| Boldgrid | W3 Total Cache | through 0.9.2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130999/WordPress-W3-Total-Cache-PHP-Code-Execution.html
- http://www.exploit-db.com/exploits/25137
- http://www.openwall.com/lists/oss-security/2013/04/24/9
- http://www.securityfocus.com/bid/59316
- http://packetstormsecurity.com/files/130999/WordPress-W3-Total-Cache-PHP-Code-Execution.html
- http://www.exploit-db.com/exploits/25137
- http://www.openwall.com/lists/oss-security/2013/04/24/9
- http://www.securityfocus.com/bid/59316