WordPress Business Intelligence Lite Plugin Arbitrary File Upload Vulnerability
Description
A vulnerability has been reported in the Business Intelligence Lite plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wp-content/plugins/wp-business-intelligence-lite/resources/open-flash-chart/php-ofc-library/ofc_upload_image.php script allowing the upload of files with arbitrary extensions to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability is reported in version 1.0.6. Other versions may also be affected.
Vulnerable Products
Vulnerable Software: WordPress Business Intelligence Lite Plugin 1.x
