Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and previous versions for WordPress allows remote malicious users to execute arbitrary code by uploading a file with an executable extension via the cf_uploadfile2[] parameter, then accessing the file via a direct request to the file in the default upload directory.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
deliciousdays cformsii |
Vulmon