SB2016052901 - Arbitrary file upload in WP Mobile detector



SB2016052901 - Arbitrary file upload in WP Mobile detector

Published: May 29, 2016 Updated: February 17, 2017

Security Bulletin ID SB2016052901
Severity
Critical
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Critical 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Arbitrary file upload (CVE-ID: N/A)

The vulnerability allows a remote attacker to upload arbitrary files to compromise the target system.

The weakness exists due to the failure to validate and sanitize input. A remote attacker can send a request toresize.php or timthumb.php inside the plugin directory with the backdoor URL that contains a PHP code.

Successful exploitation of the vulnerability may result in malicious files uploading and vulnerable system compromising.

Note: the vulnerability was being actively exploited.

Remediation

Install update from vendor's website.