Vulnerabilities > CVE-2007-3543 - Unspecified vulnerability in Wordpress

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

wordpress

NVD

Published: 2007-07-03

Updated: 2024-11-21

Summary

Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the _wp_attached_file metadata field; and then sending this file's content, along with its post_ID value, to (1) wp-app.php or (2) app.php.

Vulnerable Configurations

Part	Description	Count
Application	Wordpress Wordpress Wordpress - Wordpress Wordpress 0.71 Wordpress Wordpress 0.72 Wordpress Wordpress 0.711 Wordpress Wordpress 1.0 Wordpress Wordpress 1.0.1 Wordpress Wordpress 1.0.2 Wordpress Wordpress 1.1.1 Wordpress Wordpress 1.2 Wordpress Wordpress 1.2.1 Wordpress Wordpress 1.2.2 Wordpress Wordpress 1.2.3 Wordpress Wordpress 1.2.4 Wordpress Wordpress 1.2.5 Wordpress Wordpress 1.3 Wordpress Wordpress 1.3.2 Wordpress Wordpress 1.3.3 Wordpress Wordpress 1.5 Wordpress Wordpress 1.5.1 Wordpress Wordpress 1.5.1.1 Wordpress Wordpress 1.5.1.2 Wordpress Wordpress 1.5.1.3 Wordpress Wordpress 1.5.2 Wordpress Wordpress 1.6.2 Wordpress Wordpress 2.0 Wordpress Wordpress 2.0.1 Wordpress Wordpress 2.0.2 Wordpress Wordpress 2.0.3 Wordpress Wordpress 2.0.4 Wordpress Wordpress 2.0.5 Wordpress Wordpress 2.0.6 Wordpress Wordpress 2.0.7 Wordpress Wordpress 2.0.8 Wordpress Wordpress 2.0.9 Wordpress Wordpress 2.0.10 Wordpress Wordpress 2.0.11 Wordpress Wordpress 2.1 Wordpress Wordpress 2.1.1 Wordpress Wordpress 2.1.2 Wordpress Wordpress 2.1.3 Wordpress Wordpress 2.2 Wordpress Wordpress MU 1.1 Wordpress Wordpress MU 1.1.1 Wordpress Wordpress MU 1.2 Wordpress Wordpress MU 1.2.1 Wordpress Wordpress MU 1.2.2	105

Summary

Vulnerable Configurations

References