Popular website plugin harboured a serious 0-day for years

2018-10-22 12:22

The flaw in the popular file uploader allows an attacker to upload files and run their own command line shell on any affected server.

News URL

https://nakedsecurity.sophos.com/2018/10/22/popular-website-plugin-harboured-a-serious-0-day-for-years/

#0day

Related vendor

VENDOR	LAST 12M	#/PRODUCTS	LOW	MEDIUM	HIGH	CRITICAL	TOTAL VULNS
Plugin		2	0	13	1	0	14

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.