PT-2012-5917 · Kish · Kish Guest Posting Plugin

Henri Salo · Published 2012-10-08 · Updated 2012-10-09 · CVE-2012-5318

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kish Guest Posting plugin version 1.2

Description The issue allows remote attackers to execute arbitrary code by uploading a file with a double extension and then accessing it via a direct request to the file in the specified directory. This is due to an incomplete fix for a previous issue.

Recommendations For Kish Guest Posting plugin version 1.2, consider disabling the uploadify/scripts/uploadify.php script until a proper fix is applied to prevent unrestricted file uploads. Restrict access to the directory specified by the folder parameter to minimize the risk of exploitation. Avoid using the folder parameter in the affected uploadify.php script until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2012-5318

Affected Products

Kish Guest Posting Plugin

References · 5

• 🔥 https://exploit-db.com/exploits/18412 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-5318 · Security Note
• http://secunia.com/advisories/47688 · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/03/08/1 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5318 · Note