CVEvulnerability
CVE-2011-3129
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-08-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.
Affected configurations
• wordpress wordpress 3.1
• wordpress wordpress 3.1.1
• wordpress wordpress 3.1.2
• wordpress wordpress 3.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/49138 secunia.com
- http://wordpress.org/news/2011/05/wordpress-3-1-3/ Patch
- http://www.debian.org/security/2012/dsa-2470 www.debian.org
- http://www.securityfocus.com/bid/47995 www.securityfocus.com
- http://secunia.com/advisories/49138 secunia.com
- http://wordpress.org/news/2011/05/wordpress-3-1-3/ Patch
- http://www.debian.org/security/2012/dsa-2470 www.debian.org
- http://www.securityfocus.com/bid/47995 www.securityfocus.com