CVE-2012-0934

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:zingiri:theme_tuner_plugin:*:*:*:*:*:*:*:*
cpe:2.3:a:zingiri:theme_tuner_plugin:0.2:*:*:*:*:*:*:*
cpe:2.3:a:zingiri:theme_tuner_plugin:0.1:*:*:*:*:*:*:*
cpe:2.3:a:zingiri:theme_tuner_plugin:0.6:*:*:*:*:*:*:*
cpe:2.3:a:zingiri:theme_tuner_plugin:0.4:*:*:*:*:*:*:*
cpe:2.3:a:zingiri:theme_tuner_plugin:0.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Information

Published : 2012-01-28 20:04

Updated : 2017-08-28 18:31


NVD link : CVE-2012-0934

Mitre link : CVE-2012-0934


JSON object : View

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

dedicated server usa

Products Affected

zingiri

  • theme_tuner_plugin

wordpress

  • wordpress