Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Downloads Manager upload.php Arbitrary File Upload - CVE-2008-3362 - Vulnerability Database
WP Plugin Downloads Manager

WordPress Plugin Downloads Manager upload.php Arbitrary File Upload - CVE-2008-3362

Critical
Reference: CVE-2008-3362
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-3362
Title: WordPress Plugin Downloads Manager upload.php Arbitrary File Upload
Overview:

WordPress Plugin Downloads Manager is prone to a vulnerability that lets attackers upload and execute arbitrary code. This issue occurs because the application fails to sufficiently sanitize user-supplied input. Successfully exploiting this issue will allow attackers to upload and execute arbitrary PHP code within the context of the webserver process. This may allow an attacker to compromise the application and the underlying system other attacks are also possible. WordPress Plugin Downloads Manager version 0.2 is vulnerable other versions may also be affected.