CVE-2024-49653

📜 WordPress Portfolleo 插件漏洞利用 CVE-2024-49653 🚨 漏洞详情 标题： WordPress Portfolleo 插件 = 1.2 - 任意文件上传漏洞 描述： James Eggers 的 Portfolleo 插件（portfolleo）中存在不受限制上传危险类型文件的漏洞，允许将 Web Shell 上传到 Web 服务器。此问题影响 Portfolleo 从 n/a 版本到 1.2 版本。 了解更多： CWE-434：CWE-434 危险类型文件的不受限制上传 CVSS 评分： 分数： 9.9 严重性： CRITICAL 版本： 3.1...

WordPress Portfolleo 1.2 Shell Upload

WordPress Portfolleo plugin versions 1.2 and below suffer from a remote shell upload vulnerability...

Exploit for CVE-2024-49653

📜 WordPress Portfolleo Plugin Exploit CVE-2024-49653 🚨 V...

CVE-2024-49653

Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through = 1.2...

CVE-2024-49653

Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through = 1.2...

CVE-2024-49653

CVE-2024-49653 describes an unrestricted file upload in the WordPress Portfolleo plugin (versions

CVE-2024-49653 WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through = 1.2...

CVE-2024-49653 WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through = 1.2...

WordPress plugin Portfolleo 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2024-33605 · Unknown · Portfolleo

Name of the Vulnerable Software and Affected Versions: Portfolleo versions 1.2 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. Recommendations: For Portfolleo versions 1.2 and earlier,...

CVE-2024-49653: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through = 1.2...

WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Portfolleo versions = 1.2...

WordPress Portfolleo Plugin <= 1.2 is vulnerable to Arbitrary File Upload

Software Portfolleo Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49653 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 8f930c167ec6 Credits stealthcopter Required privilege Subscriber...