Lucene search
MitreCVELIST:CVE-2019-8943HistoryFeb 20, 2019 - 3:00 a.m.
CVE-2019-8943
2019-02-2003:00:00
mitre
www.cve.org
1
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and …/ sequences, such as a filename ending with the .jpg?/…/…/file.jpg substring.
References
packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.html
packetstormsecurity.com/files/161213/WordPress-5.0.0-Remote-Code-Execution.html
www.rapid7.com/db/modules/exploit/multi/http/wp_crop_rce
www.securityfocus.com/bid/107089
blog.ripstech.com/2019/wordpress-image-remote-code-execution/
www.exploit-db.com/exploits/46511/
www.exploit-db.com/exploits/46662/
Related
openvas
openvas
WordPress < 5.1 Path Traversal Vulnerability - Windows
2019-02-22 00:00:00
WordPress < 5.1 Path Traversal Vulnerability - Linux
2019-02-22 00:00:00
WordPress RCE Vulnerability (CVE-2019-8942) - Linux
2019-02-22 00:00:00
ubuntucve
ubuntucve
CVE-2019-8943
2019-02-20 00:00:00
CVE-2019-8942
2019-02-20 00:00:00
osv
osv
CVE-2019-8943
2019-02-20 03:29:00
CVE-2019-8942
2019-02-20 03:29:00
checkpoint_advisories
checkpoint_advisories
WordPress Core Directory Traversal (CVE-2019-8943)
2020-07-05 00:00:00
nessus
nessus
WordPress < 5.0.4 Directory Traversal Vulnerability
2019-05-30 00:00:00
archlinux
archlinux
[ASA-201903-10] wordpress: directory traversal
2019-03-18 00:00:00
veracode
veracode
Directory Traversal
2019-02-21 01:53:22
prion
prion
Path traversal
2019-02-20 03:29:00
Remote code execution
2019-02-20 03:29:00
nvd
nvd
CVE-2019-8943
2019-02-20 03:29:00
CVE-2019-8942
2019-02-20 03:29:00
cve
cve
CVE-2019-8943
2019-02-20 03:29:00
CVE-2019-8942
2019-02-20 03:29:00
debiancve
debiancve
CVE-2019-8943
2019-02-20 03:29:00
CVE-2019-8942
2019-02-20 03:29:00
packetstorm
packetstorm
WordPress 5.0.0 crop-image Shell Upload
2019-04-04 00:00:00
WordPress 5.0.0 Remote Code Execution
2021-02-01 00:00:00
attackerkb
attackerkb
Wordpress Post Meta Entry RCE
2019-02-20 00:00:00
zdt
zdt
WordPress 5.0.0 crop-image Shell Upload Exploit
2019-04-05 00:00:00
WordPress Core 5.0 - Remote Code Execution Exploit
2019-03-08 00:00:00
githubexploit
githubexploit
Exploit for Unrestricted Upload of File with Dangerous Type in Wordpress
2021-05-05 16:23:03
Exploit for Path Traversal in Wordpress
2021-02-01 12:47:28
cvelist
cvelist
CVE-2019-8942
2019-02-20 03:00:00
wpvulndb
wpvulndb
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
2019-02-19 00:00:00