CVE-2007-3543
Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the _wp_attached_file metadata…
Does this matter?
Lower severity and a low EPSS score (1.65%). Track it; it rarely justifies an emergency change on its own.
Description
Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the _wp_attached_file metadata field; and then sending this file's content, along with its post_ID value, to (1) wp-app.php or (2) app.php.
- CVSS 2.0
- 6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
- EPSS
- 1.65% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- wordpress/wordpress · wordpress/wordpress mu
- Source
- cve@mitre.org
References
- http://osvdb.org/37295
- http://secunia.com/advisories/25794Vendor Advisory
- http://trac.mu.wordpress.org/changeset/1005
- http://www.buayacorp.com/files/wordpress/wordpress-advisory.html
- http://www.securityfocus.com/bid/24642
- http://osvdb.org/37295
- http://secunia.com/advisories/25794Vendor Advisory
- http://trac.mu.wordpress.org/changeset/1005
- http://www.buayacorp.com/files/wordpress/wordpress-advisory.html
- http://www.securityfocus.com/bid/24642
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.