WordPress CVE-2013-2203 File Upload Path Disclosure Vulnerability
BID:60775
Info
WordPress CVE-2013-2203 File Upload Path Disclosure Vulnerability
| Bugtraq ID: | 60775 |
| Class: | Design Error |
| CVE: |
CVE-2013-2203 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2013 12:00AM |
| Updated: | Apr 16 2015 05:45PM |
| Credit: | Jakub Galczyk |
| Vulnerable: |
WordPress WordPress 3.3.2 WordPress WordPress 3.2.2 WordPress WordPress 3.1.4 WordPress WordPress 3.1.3 WordPress WordPress 3.1.2 WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.2 WordPress WordPress 3.3.1 WordPress WordPress 3.3 WordPress WordPress 3.1 WordPress WordPress 3.0.6 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
WordPress CVE-2013-2203 File Upload Path Disclosure Vulnerability
WordPress is vulnerable to a path-disclosure vulnerability.
Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
WordPress versions prior to 3.5.2 are vulnerable.
WordPress is vulnerable to a path-disclosure vulnerability.
Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
WordPress versions prior to 3.5.2 are vulnerable.
Exploit / POC
WordPress CVE-2013-2203 File Upload Path Disclosure Vulnerability
Attackers can exploit this issue using a web browser.
Attackers can exploit this issue using a web browser.
Solution / Fix
WordPress CVE-2013-2203 File Upload Path Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
WordPress CVE-2013-2203 File Upload Path Disclosure Vulnerability
References:
References: