CVEvulnerability
CVE-2012-3576
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-06-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.
Affected configurations
• jquindlen wpstorecart (<= 2.5.29)
• jquindlen wpstorecart 0.62
• jquindlen wpstorecart 1.0.0
• jquindlen wpstorecart 2.0.0
• jquindlen wpstorecart 2.0.1
• jquindlen wpstorecart 2.0.2
• jquindlen wpstorecart 2.0.3
• jquindlen wpstorecart 2.0.4
• jquindlen wpstorecart 2.0.5
• jquindlen wpstorecart 2.0.6
• jquindlen wpstorecart 2.0.7
• jquindlen wpstorecart 2.0.8
• jquindlen wpstorecart 2.0.9
• jquindlen wpstorecart 2.0.10
• jquindlen wpstorecart 2.0.11
• jquindlen wpstorecart 2.0.12
• jquindlen wpstorecart 2.0.13
• jquindlen wpstorecart 2.1.0
• jquindlen wpstorecart 2.1.1
• jquindlen wpstorecart 2.1.2
• jquindlen wpstorecart 2.1.3
• jquindlen wpstorecart 2.1.4
• jquindlen wpstorecart 2.1.5
• jquindlen wpstorecart 2.1.6
• jquindlen wpstorecart 2.1.7
• jquindlen wpstorecart 2.1.8
• jquindlen wpstorecart 2.2.0
• jquindlen wpstorecart 2.2.1
• jquindlen wpstorecart 2.2.2
• jquindlen wpstorecart 2.2.3
• jquindlen wpstorecart 2.2.4
• jquindlen wpstorecart 2.2.5
• jquindlen wpstorecart 2.2.6
• jquindlen wpstorecart 2.2.7
• jquindlen wpstorecart 2.2.8
• jquindlen wpstorecart 2.2.9
• jquindlen wpstorecart 2.3.0
• jquindlen wpstorecart 2.3.1
• jquindlen wpstorecart 2.3.2
• jquindlen wpstorecart 2.3.3
• jquindlen wpstorecart 2.3.4
• jquindlen wpstorecart 2.3.5
• jquindlen wpstorecart 2.3.6
• jquindlen wpstorecart 2.3.7
• jquindlen wpstorecart 2.3.8
• jquindlen wpstorecart 2.3.9
• jquindlen wpstorecart 2.3.10
• jquindlen wpstorecart 2.3.11
• jquindlen wpstorecart 2.3.12
• jquindlen wpstorecart 2.3.13
• jquindlen wpstorecart 2.3.14
• jquindlen wpstorecart 2.3.15
• jquindlen wpstorecart 2.3.16
• jquindlen wpstorecart 2.3.17
• jquindlen wpstorecart 2.4.0
• jquindlen wpstorecart 2.4.1
• jquindlen wpstorecart 2.4.2
• jquindlen wpstorecart 2.4.3
• jquindlen wpstorecart 2.4.4
• jquindlen wpstorecart 2.4.5
… and 38 more
Related
Weakness · not in database (1)
References
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&old=555124&new_path=%2Fwpstorecart&new=555124 plugins.trac.wordpress.org
- http://secunia.com/advisories/49459 Vendor Advisory
- http://wordpress.org/extend/plugins/wpstorecart/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/19023 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76166 exchange.xforce.ibmcloud.com
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fwpstorecart&old=555124&new_path=%2Fwpstorecart&new=555124 plugins.trac.wordpress.org
- http://secunia.com/advisories/49459 Vendor Advisory
- http://wordpress.org/extend/plugins/wpstorecart/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/19023 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76166 exchange.xforce.ibmcloud.com