CVE-2017-1002016 flickr-picture-backup <= 0.7 - Arbitrary file upload
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flickr picture backup project flickr picture backup | = 0.7 | No fix listed |
| wordpress flickr-picture-backup(WordPress) | <= 0.7 | No fix listed |
| daozhao flickr-picture-backup | < 0.7 | 0.7 |
References
- www.vapidlabs.com exploit third-party-advisory
- wordpress.org not-applicable
- Wordfence Intelligence third-party-advisory
- www.cve.org