ThreatPress

WordPress Vulnerabilities Database

Back

WordPress PHP Event Calendar Plugin <= 1.5 - Arbitrary File Upload

Product
PHP Event Calendar
Description
This plugin is prone to an arbitrary file upload vulnerability via "uploadify.php" file.
Solution
Update the plugin.
Classification
Type Arbitrary File Upload
OWASP Top 10 A1: Injection
References
Packet Storm Security
CVE
Name CVE-N/A
Versions
Affected In <= 1.5
Fixed In 1.5.1
Disclosure date
2015-04-02
Credits
CrashBandicot
Submitter
ThreatPress