CVE-2017-1002000

Summary

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content.

Affected Software

Weaknesses

• Unrestricted File Upload

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/96905
• http://www.securityfocus.com/bid/96899
• https://wordpress.org/plugins-wp/mobile-friendly-app-builder-by-easytouch/
• https://www.exploit-db.com/exploits/41540/
• http://www.vapidlabs.com/advisory.php?v=179

References

• http://www.securityfocus.com/bid/96905
• http://www.securityfocus.com/bid/96899
• https://wordpress.org/plugins-wp/mobile-friendly-app-builder-by-easytouch/
• https://www.exploit-db.com/exploits/41540/
• http://www.vapidlabs.com/advisory.php?v=179

• ←Previous
• Next→