jetlib.sec » Bugtraq » AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload

Feeds

132963 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• January 23, 2012
• 

  AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload

  Posted: January 23rd, 2012, 8:14am PST

  Tags:   

  Posted by pavel on Jan 23

  #Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload
  #Version: < 1.1.9
  #Date: 2012-01-19
  #Author: 6Scan (http://6scan.com) security team
  #Software Link: http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/
  #Official fix: This advisory is released after the vendor was contacted and fixed the issue promptly.
  #Description: Unauthorized users could upload arbitrary files to the vulnerable server, potentially...