Description

wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.

Remediation

References

CVE-2012-6634

Related Vulnerabilities

Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2003-0230)

WordPress Plugin WordPress Social Login Cross-Site Scripting (2.0.3)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34468)

WordPress Plugin Forms-Form builder and Contact form Multiple Unspecified Vulnerabilities (1.4.7)

WordPress Plugin SH Slideshow 'ajax.php' SQL Injection (3.1.4)

Severity

Medium

Classification

CVE-2012-6634 CWE-264

Tags

Missing Update Known Vulnerabilities