Lucene search
PRIOn knowledge basePRION:CVE-2023-2068HistoryJun 27, 2023 - 2:15 p.m.
Design/Logic Flaw
2023-06-2714:15:00
PRIOn knowledge base
www.prio-n.com
10
file manager
wordpress plugin
file upload
logic flaw
rce
mime type
unauthenticated users
The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file_manager_advanced_shortcode | le | 2.3.2 |
Related
cve
cve
CVE-2023-2068
2023-06-27 14:15:10
wpexploit
wpexploit
nvd
nvd
CVE-2023-2068
2023-06-27 14:15:10
packetstorm
packetstorm
File Manager Advanced Shortcode 2.3.2 Remote Code Execution
2023-06-05 00:00:00
WordPress File Manager Advanced Shortcode 2.3.2 Remote Code Execution
2023-07-25 00:00:00
zdt
zdt
wpvulndb
wpvulndb
metasploit
metasploit
cvelist
cvelist
exploitdb
exploitdb
rapid7blog
rapid7blog
Metasploit Weekly Wrap up
2023-07-28 17:25:08
wordfence
wordfence