CVE-2012-1205 Relocate Upload < 0.20 - Remote File Inclusion
HighCVSS 7.5
EPSS 24.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alanft relocate-upload | <= 0.14 | No fix listed |
| alanft relocate-upload | = 0.10 | No fix listed |
| alanft relocate-upload | = 0.11 | No fix listed |
| wordpress relocate-upload(WordPress) | < 0.20 | 0.20 |
References
- 79250 vdb-entry
- plugins.trac.wordpress.org exploit patch
- 47976 third-party-advisory vendor-advisory
- wordpress.org patch
- 49693 exploit vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org