PT-2012-2031 · WordPress · Wp Symposium

Published 2012-01-04 · Updated 2017-08-29 · CVE-2011-5051

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WP Symposium plugin versions prior to 11.12.24

Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension using "uploadify/upload admin avatar.php" or "uploadify/upload profile avatar.php" API endpoints, and then accessing it via a direct request to the file in an unspecified directory inside the webroot.

Recommendations For WP Symposium plugin versions prior to 11.12.24, update to version 11.12.24 or later to resolve the issue. As a temporary workaround, consider disabling the file upload functionality in "uploadify/upload admin avatar.php" and "uploadify/upload profile avatar.php" to prevent exploitation. Restrict access to the uploadify directory to minimize the risk of uploading malicious files.

Fix

Related Identifiers

CVE-2011-5051

Affected Products

Wp Symposium

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2011-5051 · Security Note
• http://secunia.com/advisories/46097 · Vendor Advisory
• http://secunia.com/secunia_research/2011-91 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5051 · Note
• http://osvdb.org/78041 · Note
• https://wpsymposium-trac.sourcerepo.com/wpsymposium_trac/ticket/265 · Note
• http://osvdb.org/78042 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72012 · Note