CVE-2019-8942

🗓️ 20 Feb 2019 03:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 335 Views🌐 WEB

WordPress 4.9.9 and 5.x before 5.0.1 Remote Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 34
0day.today	WordPress Core 5.0 - Remote Code Execution Exploit	8 Mar 201900:00	–	zdt
0day.today	WordPress 5.0.0 crop-image Shell Upload Exploit	5 Apr 201900:00	–	zdt
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Wordpress	22 May 202616:36	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Wordpress	5 May 202116:23	–	githubexploit
ATTACKERKB	Wordpress Post Meta Entry RCE	20 Feb 201900:00	–	attackerkb
Circl	CVE-2019-8942	1 Mar 201908:59	–	circl
CNVD	WordPress Remote Code Execution Vulnerability	20 Feb 201900:00	–	cnvd
Check Point Advisories	WordPress Core Local File Inclusion Remote Code Execution (CVE-2019-8942)	20 Feb 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-8942	20 Feb 201903:00	–	cvelist
Debian	[SECURITY] [DLA 1742-1] wordpress security update	31 Mar 201919:30	–	debian

NVD

Node

wordpress wordpressRange<4.9.9

OR

wordpress wordpressMatch5.0-

OR

wordpress wordpressMatch5.0beta1

OR

wordpress wordpressMatch5.0beta2

OR

wordpress wordpressMatch5.0beta3

OR

wordpress wordpressMatch5.0beta4

OR

wordpress wordpressMatch5.0beta5

OR

wordpress wordpressMatch5.0rc1

OR

wordpress wordpressMatch5.0rc2

OR

wordpress wordpressMatch5.0rc3

Node

debian debian_linuxMatch9.0

Source	Link
rapid7	www.rapid7.com/db/modules/exploit/multi/http/wp_crop_rce
blog	www.blog.ripstech.com/2019/wordpress-image-remote-code-execution/
wpvulndb	www.wpvulndb.com/vulnerabilities/9222
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00044.html
debian	www.debian.org/security/2019/dsa-4401
exploit-db	www.exploit-db.com/exploits/46662/
packetstormsecurity	www.packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.html
securityfocus	www.securityfocus.com/bid/107088
exploit-db	www.exploit-db.com/exploits/46511/

Parameter	Position	Path	Description	CWE
async-upload	request body	wp-admin/async-upload.php	Upload endpoint used to upload a crafted image payload.	CWE-434
name	request body	wp-admin/async-upload.php	Upload endpoint used to upload a crafted image payload.	CWE-434
_wpnonce	request body	wp-admin/async-upload.php	Upload endpoint used to upload a crafted image payload.	CWE-434
action	request body	wp-admin/admin-ajax.php	AJAX endpoints used for image-editor and crop-image actions in the exploit chain.	CWE-434
_ajax_nonce	request body	wp-admin/admin-ajax.php	AJAX endpoints used for image-editor and crop-image actions in the exploit chain.	CWE-434
postid	request body	wp-admin/admin-ajax.php	AJAX endpoints used for image-editor and crop-image actions in the exploit chain.	CWE-434
history	request body	wp-admin/admin-ajax.php	AJAX endpoints used for image-editor and crop-image actions in the exploit chain.	CWE-434
do	request body	wp-admin/admin-ajax.php	AJAX endpoints used for image-editor and crop-image actions in the exploit chain.	CWE-434
_wpnonce	request body	wp-admin/post.php	Endpoint used to modify post meta, enabling path alteration of attachments.	CWE-434
action	request body	wp-admin/post.php	Endpoint used to modify post meta, enabling path alteration of attachments.	CWE-434

21 Nov 2024 04:50Current

7.8High risk

Vulners AI Score7.8

CVSS 26.5

CVSS 38.8

EPSS0.93445

cve-2019-8942 wordpress remote code execution nvd security vulnerability