Wordpress Import Drupal Module Unauthorized Access Vulnerability
BID:40262
Info
Wordpress Import Drupal Module Unauthorized Access Vulnerability
| Bugtraq ID: | 40262 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 19 2010 12:00AM |
| Updated: | May 19 2010 12:00AM |
| Credit: | Jennifer Hodgdon |
| Vulnerable: |
Jerome C Wordpress Import 6.x-2.0 |
| Not Vulnerable: |
Jerome C Wordpress Import 6.x-2.1 |
Discussion
Wordpress Import Drupal Module Unauthorized Access Vulnerability
The Wordpress Import Drupal module is prone to an unauthorized-access vulnerability.
Attackers can exploit this issue to upload arbitrary files without proper authorization.
Versions of Wordpress Import prior to 6.x-2.1 are vulnerable.
The Wordpress Import Drupal module is prone to an unauthorized-access vulnerability.
Attackers can exploit this issue to upload arbitrary files without proper authorization.
Versions of Wordpress Import prior to 6.x-2.1 are vulnerable.
Exploit / POC
Wordpress Import Drupal Module Unauthorized Access Vulnerability
Attackers can exploit this issue via a browser.
Attackers can exploit this issue via a browser.
Solution / Fix
Wordpress Import Drupal Module Unauthorized Access Vulnerability
Solution:
Updates are available. Please see the references for details.
Jerome C Wordpress Import 6.x-2.0
Solution:
Updates are available. Please see the references for details.
Jerome C Wordpress Import 6.x-2.0
-
Jerome C wordpress_import 6.x-2.1
http://ftp.drupal.org/files/projects/wordpress_import-6.x-2.1.tar.gz
References
Wordpress Import Drupal Module Unauthorized Access Vulnerability
References:
References:
- Drupal Language Switcher Dropdown Homepage (Drupal)
- SA-CONTRIB-2010-049 - Wordpress Import - Access bypass (Drupal)
- Wordpress Import - Homepage (Jerome C)