cve-2018-17207

CVE-2018-17207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-17207 Image author: https://github.com/cved-sources/cve-2018-17207...

CVE-2018-17207

An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files installer.php and installer-backup.php, an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution...

CVE-2018-17207

creationtimestamp| type| source ---|---|--- 2018-12-11 18:12:09+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/php/wpduplicatorcodeinject.rb 2018-12-12 15:33:01+00:00| published-proof-of-concept| https://t.me/defconnews/257 2025-02-06 03:13:43+00:00...

CVE-2018-17207

The Snap Creek Duplicator WordPress plugin (versions prior to 1.2.42 ) is vulnerable to arbitrary code execution due to leftover installer files, specifically installer.php and installer-backup.php, left in the filesystem after a backup restoration. An attacker can access these files to call a fu...