CodePath_Week_7-8

CodePath Settimana 7-8 CodePath Assegnazione per le Settimane 7 e 8: CVE-2017-14718, CVE-2019-9787 e Modifica non autenticata del contenuto di Pagine/Post tramite API REST Progetto 7 - WordPress Pentesting Tempo impiegato: 16 ore in totale Obiettivo: Trovare, analizzare, ricreare e documentare...

WordPress 3.9.x < 3.9.20 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A flaw in $wpdb-prepare can create unsafe queries leading to potential SQL injection flaws with plugins and themes. - Multiple cross-site scripting XSS vulnerabilities...

WordPress 3.0-4.8.1 - Path Traversal in Unzipping

Description A path traversal vulnerability was discovered in the file unzipping code...

WordPress <=4.8.1 - Path traversal vulnerability (file unzipping code)

Path traversal vulnerability found by Alex Chapman noxrnet in WordPress file unzipping code version 4.8.1 and earlier versions. Solution Update the WordPress to the latest available version at least 4.8.2...