Nmedia WordPress Member Conversation Plugin 'doupload.php' Arbitrary File Upload Vulnerability
BID:53790
Info
Nmedia WordPress Member Conversation Plugin 'doupload.php' Arbitrary File Upload Vulnerability
| Bugtraq ID: | 53790 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-3577 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 05 2012 12:00AM |
| Updated: | Mar 19 2015 07:35AM |
| Credit: | Sammy FORGIT |
| Vulnerable: |
WordPress Nmedia WordPress Member Conversation 1.35.0 |
| Not Vulnerable: | |
Discussion
Nmedia WordPress Member Conversation Plugin 'doupload.php' Arbitrary File Upload Vulnerability
The Nmedia WordPress Member Conversation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
An attacker can exploit this vulnerability to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.
Nmedia WordPress Member Conversation 1.35.0 is vulnerable; other versions may also be affected.
The Nmedia WordPress Member Conversation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
An attacker can exploit this vulnerability to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.
Nmedia WordPress Member Conversation 1.35.0 is vulnerable; other versions may also be affected.
Exploit / POC
Nmedia WordPress Member Conversation Plugin 'doupload.php' Arbitrary File Upload Vulnerability
Attackers can use a browser to exploit this issue.
The following exploit is available:
Attackers can use a browser to exploit this issue.
The following exploit is available:
Solution / Fix
Nmedia WordPress Member Conversation Plugin 'doupload.php' Arbitrary File Upload Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Nmedia WordPress Member Conversation Plugin 'doupload.php' Arbitrary File Upload Vulnerability
References:
References:
- Email Newsletter plugin Homepage (WordPress)
- Nmedia WordPress Member Conversation Plugin (Wordpress)