CVE-2011-5051
WP Symposium < 11.12.24 - Arbitrary File Upload
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.
Múltiples vulnerabilidades de subida de ficheros sin restricción en el complemento WP Symposium antes de v11.12.24 para WordPress, permite a atacantes remotos ejecutar código de su elección subiendo un fichero con una extensión ejecutable usando (1) uploadify/upload_admin_avatar.php o (2) uploadify/upload_profile_avatar.php, y accediendo posteriormente a él a través de una petición directa al fichero en un directorio no especificado dentro del webroot.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-12-28 CVE Published
- 2012-01-04 CVE Reserved
- 2024-08-07 CVE Updated
- 2024-08-24 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/78041 | Vdb Entry | |
| http://osvdb.org/78042 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/72012 | Vdb Entry | |
| https://wpsymposium-trac.sourcerepo.com/wpsymposium_trac/ticket/265 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/46097 | 2017-08-29 | |
| http://secunia.com/secunia_research/2011-91 | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | <= 11.12.08 Search vendor "Wpsymposium" for product "Wp Symposium" and version " <= 11.12.08" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.9.10 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.9.10" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.9.14 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.9.14" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.9.17 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.9.17" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.9.24 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.9.24" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.10.1 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.10.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.10.8 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.10.8" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.10.15 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.10.15" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.10.22 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.10.22" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.10.29 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.10.29" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.11.5 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.11.5" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.11.12 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.11.12" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.11.19 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.11.19" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.11.26 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.11.26" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Wpsymposium Search vendor "Wpsymposium" | Wp Symposium Search vendor "Wpsymposium" for product "Wp Symposium" | 11.12.03 Search vendor "Wpsymposium" for product "Wp Symposium" and version "11.12.03" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|