Security Advisory

CVE-2007-3543

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-07-03 20:00:00

Last updated 2024-08-07 14:21:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the _wp_attached_file metadata field; and then sending this file's content, along with its post_ID value, to (1) wp-app.php or (2) app.php.

← Browse all CVEs View on cve.org ↗