cve/2012/CVE-2012-3814.md

CVE-2012-3814

Description

Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates