Description

wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.

Remediation

References

CVE-2012-6634

Related Vulnerabilities

WordPress Plugin Malware Scanner Unspecified Vulnerability (4.7.3)

WordPress Plugin Advanced Database Cleaner SQL Injection (3.0.1)

WordPress Plugin LiveChat-WP live chat Cross-Site Scripting (3.7.3)

WordPress Other Vulnerability (CVE-2006-3389)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4445)

Severity

Medium

Classification

CVE-2012-6634 CWE-264

Tags

Missing Update Known Vulnerabilities