PHP Code execution vulnerability | ww.wp.xz.cn

Resolved cervoise
(@cervoise)

12 years, 7 months ago

Hi,

I’ve noticied to [email protected] a vulnerability in your plugin. It allows remote php code execution for users with some rigths on photo album.

Did you get the info?

http://ww.wp.xz.cn/plugins/wp-photo-album-plus/

Viewing 3 replies - 1 through 3 (of 3 total)

Plugin Author Jacob N. Breetvelt
(@opajaap)

12 years, 7 months ago

No i did not, please mail me: opajaap at opajaap dot nl with details

Plugin Author Jacob N. Breetvelt
(@opajaap)

12 years, 7 months ago

You would please me very much with detailed info on mail address opajaap at opajaap dot nl

Plugin Author Jacob N. Breetvelt
(@opajaap)

12 years, 7 months ago

Fixed in version 5.1.13. Uploading zipfiles is now restricted to administrators only. For security reasons.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘PHP Code execution vulnerability’ is closed to new replies.

3 replies
2 participants
Last reply from: Jacob N. Breetvelt
Last activity: 12 years, 7 months ago
Status: resolved