CVE-2011-3981

Currently unrated

Key Information:

Vendor
Wordpress
Status
Allwebmenus Plugin
Vendor
CVE Published:
4 October 2011

Summary

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

References

http://plugins.trac.wordpress.org/changeset/438959/allweb...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/49685
vdb-entryx_refsource_BID
http://www.exploit-db.com/exploits/17861
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.