Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-1010. PoCs published by 6Scan.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in the AllWebMenus WordPress Menu Plugin versions < 1.1.9. The vulnerability allows unauthorized users to upload malicious files via the 'actions.php' script due to insufficient input validation and referrer checks.
Description
Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.
Exploits (1)
This exploit demonstrates an arbitrary file upload vulnerability in the AllWebMenus WordPress Menu Plugin versions < 1.1.9. The vulnerability allows unauthorized users to upload malicious files via the 'actions.php' script due to insufficient input validation and referrer checks.