|
Description
|
|
Sammy Forgit has discovered a vulnerability in the Font Uploader plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the wp-content/plugins/font-uploader/font-upload.php script improperly validating the extension of an uploaded file. This can be exploited to execute arbitrary PHP code by uploading a PHP file with an appended ".ttf" or ".otf" file extension.
Successful exploitation requires that Apache is not configured to handle the mime-type for media files with a ".ttf" or ".otf" extension (not configured by default).
The vulnerability is confirmed in version 1.2.4. Other versions may also be affected.
|
|
|
|
|
|
Vulnerable Products
|
|
Vulnerable Software:
WordPress Font Uploader Plugin 1.x
|
|
|
|
|
|
Solution
|
|
Edit the source code to ensure that input is properly verified.
|
|
|
|
|
|
CVE
|
|
CVE-2012-3814
|
|
|
|
|
|
References
|
|
OpenSysCom:
http://www.opensyscom.fr/Actualites/wordpress-plugins-wordpress-font-uploader-shell-upload-vulnerability.html
|
|
|
|
|
|
Vulnerability Manager Detection
|
|
No
|
|
|
|
|
|
IPS Protection
|
|
|
|
|
|
|
