WordPress 'media-upload.php' Information Disclosure Vulnerability
BID:65218
Info
WordPress 'media-upload.php' Information Disclosure Vulnerability
| Bugtraq ID: | 65218 |
| Class: | Unknown |
| CVE: |
CVE-2012-6634 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 27 2012 12:00AM |
| Updated: | Jun 27 2012 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
WordPress WordPress 3.3.2 WordPress WordPress 3.2.2 WordPress WordPress 3.1.4 WordPress WordPress 3.1.3 WordPress WordPress 3.1.2 WordPress WordPress 3.1.1 WordPress WordPress 3.3.1 WordPress WordPress 3.3 WordPress WordPress 3.2.1 WordPress WordPress 3.2-RC3 WordPress WordPress 3.2-RC1 WordPress WordPress 3.2 Beta1 WordPress WordPress 3.1 |
| Not Vulnerable: |
WordPress WordPress 3.3.3 |
Discussion
WordPress 'media-upload.php' Information Disclosure Vulnerability
WordPress is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may aid in further attacks.
Versions prior to WordPress 3.3.3 are vulnerable.
WordPress is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may aid in further attacks.
Versions prior to WordPress 3.3.3 are vulnerable.
Exploit / POC
WordPress 'media-upload.php' Information Disclosure Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
WordPress 'media-upload.php' Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.