CVE:CVE-2007-3544
CNNVD:CNNVD-200707-018
WordPress 2.2.1和WordPress MU 1.2.3的(1)wp-app.php和(2)app.php中存在未限制文件上传漏洞。远程认证用户可能通过与wp_postmeta表格和常规布置中自定义范围使用相关的未明向量上载并执行任意的PHP代码。
solution:Upgrade wordpress wordpress to a higher version than 2.2.0,and avoid the version (,2.2.0]; Upgrade wordpress wordpress_mu to a higher version than 1.2.2,and avoid the version (,1.2.2]