漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/plugins/wp-shopping-cart/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Instinct WP e-Commerce 'image_processing.php'任意文件上传漏洞
Vulnerability Description
Wordpress e-Commerce Plugin 3.4版本及其早期版本的image_processing.php中存在无限制文件上传漏洞。远程攻击者可以借助上传一个具有可执行扩展名的文件并对wp-content/plugins/wp-shopping-cart/中的文件提交一个直接的请求来访问该文件,以执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A