Skip to content
OpenAdvisories

Vendor

jkriddle

2 known vulnerabilities.

Products

asset-manager 1 Banner Cycler 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2012-10026 Public exploit

    WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

    The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php. The endpoint fails to properly validate and restrict uploaded file types, allowing remote attackers to upload malicious PHP…

    jkriddle asset-manager Web / CMS