CVE-2012-1010
07.02.2012, 21:55
Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.Enginsight
| Vendor | Product | Version |
|---|---|---|
| likno | allwebmenus_plugin | 𝑥 ≤ 1.1.7 |
| likno | allwebmenus_plugin | 1.0.1 |
| likno | allwebmenus_plugin | 1.0.3 |
| likno | allwebmenus_plugin | 1.0.4 |
| likno | allwebmenus_plugin | 1.0.9 |
| likno | allwebmenus_plugin | 1.0.10 |
| likno | allwebmenus_plugin | 1.0.11 |
| likno | allwebmenus_plugin | 1.0.12 |
| likno | allwebmenus_plugin | 1.0.17 |
| likno | allwebmenus_plugin | 1.0.18 |
| likno | allwebmenus_plugin | 1.0.19 |
| likno | allwebmenus_plugin | 1.0.20 |
| likno | allwebmenus_plugin | 1.0.21 |
| likno | allwebmenus_plugin | 1.0.22 |
| likno | allwebmenus_plugin | 1.0.23 |
| likno | allwebmenus_plugin | 1.0.24 |
| likno | allwebmenus_plugin | 1.1.1 |
| likno | allwebmenus_plugin | 1.1.2 |
| likno | allwebmenus_plugin | 1.1.3 |
| likno | allwebmenus_plugin | 1.1.4 |
| likno | allwebmenus_plugin | 1.1.5 |
| likno | allwebmenus_plugin | 1.1.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References