CVE-2021-24155

🗓️ 05 Apr 2021 18:27:42Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 144 Views🌐 WEB

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 allows high privilege users to upload arbitrary files, leading to RCE

Reporter	Title	Published	Views	Family All 20
0day.today	Wordpress Backup Guard 1.5.8 Plugin - Remote Code Execution (Authenticated) Exploit	5 Jul 202100:00	–	zdt
0day.today	WordPress Backup Guard Authenticated Remote Code Execution Exploit	21 Jul 202100:00	–	zdt
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Backup-Guard Backup_Guard	30 Jul 202111:28	–	githubexploit
Circl	CVE-2021-24155	10 Jul 202116:29	–	circl
CNNVD	WordPress 代码问题漏洞	5 Apr 202100:00	–	cnnvd
Check Point Advisories	p0wny Shell Remote Code Execution (CVE-2017-9830; CVE-2018-15139; CVE-2018-19423; CVE-2018-6383; CVE-2020-29607; CVE-2021-24155; CVE-2021-24347)	19 Oct 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-24155 Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload	5 Apr 202118:27	–	cvelist
Exploit DB	Wordpress Plugin Backup Guard 1.5.8 - Remote Code Execution (Authenticated)	5 Jul 202100:00	–	exploitdb
Metasploit	Wordpress Plugin Backup Guard - Authenticated Remote Code Execution	21 Jul 202117:42	–	metasploit
Nuclei	WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload	6 Jun 202603:01	–	nuclei

NVD

Vulners

Node

backup-guard backup_guardRange<1.6.0wordpress

[
  {
    "product": "WordPress Backup and Migrate Plugin – Backup Guard",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.6.0",
        "status": "affected",
        "version": "1.6.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/163382/WordPress-Backup-Guard-1.5.8-Shell-Upload.html
wpscan	www.wpscan.com/vulnerability/d442acac-4394-45e4-b6bb-adf4a40960fb
packetstormsecurity	www.packetstormsecurity.com/files/163623/WordPress-Backup-Guard-Authenticated-Remote-Code-Execution.html

Parameter	Position	Path	Description	CWE
files[]	request body	wp-admin/admin-ajax.php?action=backup_guard_importBackup&token=b4c6ea799c	Upload of arbitrary files due to improper validation of SGBP format/extension enabling RCE.	CWE-434
action	request body	wp-admin/admin-ajax.php?action=backup_guard_importBackup&token=b4c6ea799c	Upload of arbitrary files due to improper validation of SGBP format/extension enabling RCE.	CWE-434
token	request body	wp-admin/admin-ajax.php?action=backup_guard_importBackup&token=b4c6ea799c	Upload of arbitrary files due to improper validation of SGBP format/extension enabling RCE.	CWE-434

21 Nov 2024 05:52Current

7.1High risk

Vulners AI Score7.1

CVSS 26.5

CVSS 3.17.2

EPSS0.92823

CWE-434