PT-2013-1976 · WordPress · Organizer Plugin

Published 2013-01-24 · Updated 2017-11-22 · CVE-2012-6512

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Organizer plugin version 1.2.1 for WordPress

Description The issue allows remote attackers to obtain the installation path via unspecified vectors to various PHP files, including "plugin hook.php", "page/index.php", "page/dir.php", "page/options.php", "page/resize.php", "page/upload.php", "page/users.php", and "page/view.php".

Recommendations For Organizer plugin version 1.2.1, update to a newer version that contains a fix for this issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-6512

Affected Products

Organizer Plugin

References · 5

• 🔥 http://websecurity.com.ua/5782 · Exploit
• 🔥 http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-6512 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6512 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75107 · Note