Unscored severity · published Jun 17, 2012
CVE-2012-3578
Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by…
–
CVSS
8.3%
EPSS
No
On KEV
Description
Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in html/images.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.3% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FW
Fcchat Widget · Wordpress
through 2.2.13.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3578
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3578
Exploit
http://packetstormsecurity.org/files/113323/WordPress-FCChat-Widget-2.x-Shell-Upload.html
Vendor Advisory
http://secunia.com/advisories/49419
Exploit
http://www.opensyscom.fr/Actualites/wordpress-plugins-fcchat-widget-shell-upload-vulnerability.html
Exploit
http://www.securityfocus.com/bid/53855
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/76123