Vulnerability in Wordpress
CVE-2011-5051
Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_a…
EPSS: 0.043 (89.0th percentile) — read the EPSS interpretation.
Affected products
- Wordpress
- Wpsymposium Wp_symposium — versions 11.9.10, 11.9.14, 11.9.17
- N/a — versions n/a
Public proof-of-concept exploits
References
- 78041 (x_refsource_OSVDB, vdb-entry)
- 46097 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- 78042 (x_refsource_OSVDB, vdb-entry)
- wpsymposium-admin-profile-file-upload(72012) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2011-5051?
- CVE-2011-5051 is a vulnerability in Wordpress. Published 2012-01-04.
- Is CVE-2011-5051 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.