CVE-2018-15877

🗓️ 26 Aug 2018 07:00:00Reported by mitreType

cvelist

cvelist🔗 www.cve.org👁 13 Views

The Plainview Activity Monitor plugin for WordPress is vulnerable to OS command injection through the ip parameter in a specific request

Reporter	Title	Published	Views	Family All 21
0day.today	WordPress Plainview Activity Monitor 20161228 Plugin - Command Injection Exploit	28 Aug 201800:00	–	zdt
0day.today	WordPress Plainview Activity Monitor 20161228 Remote Command Execution Exploit	30 Nov 201900:00	–	zdt
0day.today	WordPress Plainview Activity Monitor 20161228 Plugin - Remote Code Execution (Authenticated) Exploit	7 Jul 202100:00	–	zdt
ATTACKERKB	CVE-2018-15877	26 Aug 201800:00	–	attackerkb
Circl	CVE-2018-15877	27 Aug 201800:00	–	circl
CNVD	WordPress Plainview Activity Monitor Plugin OS Command Injection Vulnerability	27 Aug 201800:00	–	cnvd
Check Point Advisories	WordPress Plainview Activity Monitor Plugin Command Injection (CVE-2018-15877)	5 Sep 201900:00	–	checkpoint_advisories
CVE	CVE-2018-15877	26 Aug 201807:00	–	cve
Exploit DB	WordPress Plugin Plainview Activity Monitor 20161228 - (Authenticated) Command Injection	27 Aug 201800:00	–	exploitdb
Exploit DB	WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)	7 Jul 202100:00	–	exploitdb

Source	Link
exploit-db	www.exploit-db.com/exploits/45274/
packetstormsecurity	www.packetstormsecurity.com/files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html
github	www.github.com/aas-n/CVE/tree/master/CVE-2018-15877
packetstormsecurity	www.packetstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html

07 Jul 2021 17:06Current

9High risk

Vulners AI Score9

EPSS0.80319

plainview activity monitor wordpress os command injection shell metacharacters ip parameter