Description

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

Remediation

References

CVE-2011-3129

Related Vulnerabilities

WordPress Plugin WP Google Maps Cross-Site Scripting (7.10.41)

WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots Cross-Site Scripting (6.61)

Dojo Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2021-23450)

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4900)

TYPO3 Improper Input Validation Vulnerability (CVE-2009-0258)

Severity

Critical

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2011-3129