CVE-2014-9473 | BDVDB-2026-67186 Detail

Description#

Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cf_uploadfile2[] parameter, then accessing the file via a direct request to the file in the default upload directory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wordpress.org/plugins/cforms2/changelog/
http://www.securityfocus.com/archive/1/534349/30/0/threaded

Exploit#

No public exploit known

History#

Version 12015-01-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.