A vulnerability was found in Likno AllWebMenus plugin up to 1.0.23 and classified as critical. Affected by this issue is some unknown functionality of the file actions.php of the component File Upload. The manipulation leads to improper input validation.
This vulnerability is handled as CVE-2012-1010. The attack may be launched remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2012-1010 | Likno AllWebMenus plugin up to 1.0.23 File Upload actions.php input validation (EDB-18407 / XFDB-72640)
A vulnerability was found in Likno AllWebMenus plugin up to 1.0.23 and classified as critical. Affected by this issue is some unknown functionality of the file…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Workaround & Virtual-Patching empfohlen
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Öffentliche PoCs existieren. Isolieren Sie das System oder wenden Sie Micro-Segmentierungsregeln an, bis offizielle Patches vorliegen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.securityfocus.com
-
Web Referenceexchange.xforce.ibmcloud.com
-
Web Referencewordpress.org
-
Web Referencearchives.neohapsis.com
-
Web Referencesecunia.com
1 öffentliche Exploit-Referenz(en) detektiert (Exploit Database (EDB)).
PoC einsehen