CVE-2007-3544

Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload…

published July 3, 2007

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors, possibly related to the wp_postmeta table and the use of custom fields in normal (non-attachment) posts. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-3543.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01769 · 77.8th percentile
Published
2007-07-03T20:00Z
EPSS history
Timeline
  • 03 JUL 20:00Z
    Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload…
    cvelistv5