Python-exploit-CVE-2020-25213

描述 WordPress的File Manager wp-file-manager 插件6.9之前的版本允许远程攻击者上传并执行任意PHP代码，因为它将一个不安全的示例elFinder连接器文件重命名为.php扩展名。例如，这允许攻击者运行elFinder的upload（或mkfile和put）命令，将PHP代码写入 wp-content/plugins/wp-file-manager/lib/files/ 目录。该漏洞于2020年8月和9月在野外被利用。 演示 root@kitploit: python3 exploit.py url command python3 exploit.p...

EUVD-2018-3755

Malware in sbrugna...

WordPress plugin Catch Themes Demo Import 代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A code issue vulnerability exists in the WordPress plugin Cat...

CVE-2018-19550

Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveyssubmit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a admin/temp/surveys/ URI...