PT-2012-4824
CVE-2012-3578
·
تاريخ النشر
2012-06-17
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
FCChat Widget plugin versions 2.2.13.1 and earlier for WordPress
Description
The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in html/images.
Recommendations
For FCChat Widget plugin versions 2.2.13.1 and earlier, consider disabling the file upload functionality in html/Upload.php until a patch is available. Restrict access to the html/images directory to minimize the risk of exploitation. Avoid using the file upload feature in the affected plugin until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾