CVE-2011-5051

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by…

published January 4, 2012

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04195 · 90.8th percentile
Published
2012-01-04T19:00Z
EPSS history
Timeline
  • 04 JAN 19:00Z
    Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by…
    cvelistv5