Vulnerability in Wordpress
CVE-2011-5051
Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_a…
EPSS: 0.042 (90.0th percentile) — read the EPSS interpretation.
Affected products
- Wordpress
- Wpsymposium Wp_symposium — versions 11.9.10, 11.9.14, 11.9.17
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2011-5051?
- CVE-2011-5051 is a vulnerability in Wordpress. Published 2012-01-04.
- Is CVE-2011-5051 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.