CVE-2021-24347 SP Project & Document Manager <2 4.22 - Authenticated Shell Upload

2021-06-1413:37:12

CWE-178

WPScan

www.cve.org

vulnerability

sp project & document manager

wordpress

file upload

file extension validation

AI Score

8.9

Confidence

High

EPSS

0.971

Percentile

99.8%

JSON

The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension’s case, for example, from “php” to “pHP”.

CNA Affected

[
  {
    "product": "SP Project & Document Manager",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.22",
        "status": "affected",
        "version": "4.22",
        "versionType": "custom"
      }
    ]
  }
]