Unrated severityNVD Advisory· Published Feb 24, 2012· Updated Apr 29, 2026
CVE-2012-1205
CVE-2012-1205
Description
PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
Affected products
3cpe:2.3:a:alanft:relocate-upload:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:alanft:relocate-upload:*:*:*:*:*:*:*:*range: <=0.14
- cpe:2.3:a:alanft:relocate-upload:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:alanft:relocate-upload:0.11:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- wordpress.org/extend/plugins/relocate-upload/changelog/nvdPatch
- plugins.trac.wordpress.org/changeset/504380/relocate-uploadnvdExploitPatch
- www.securityfocus.com/bid/49693nvdExploit
- secunia.com/advisories/47976nvdVendor Advisory
- osvdb.org/79250nvd
News mentions
0No linked articles in our index yet.