high7.5Public exploit code
CVE-2014-10021
Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin WP Symposium 14.11 - Arbitrary File Upload (Metasploit)2015-01-13 · remote · php · Verified
- WordPress Plugin WP Symposium 14.11 - Arbitrary File Upload2014-12-15 · webapps · php
Impact
Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpsymposiumpro | Wp Symposium | Version 14.11 |