CVE-2017-1002000

CVE-2017-1002000 is an unauthenticated file-upload vulnerability in the WordPress plugin mobile-friendly-app-builder-by-easytouch v3.0. The issue is in ./mobile-friendly-app-builder-by-easytouch/server/images.php, where authentication/authorization checks are not performed, enabling content uploa...

WordPress Multiple Plugin File Upload

import requests import random import string print "---------------------------------------------------------------------" print "Multiple Wordpress Plugin - Remote File Upload Exploit\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir Njiru\nCWE: 434\n\n1. Zen App Mobile Native =3.0...