7 matches found
Wordpress_CVE-2019-9787
WordpressCVE-2019-9787 尝试使用Docker通过自动安装WordPress来重现此问题 CVE-2019-9787 CSRF的PoC WordPress版本5.1及以下 要展示CVE-2019-9787的全部潜力,你可能需要一个比nginx/iframe-post.html中给出的注释更恶意的代码片段。在我的代码中,我没有利用WordPress中wpfilterpostkses的缺陷。 除测试目的外,请勿使用此代码。 使用bash安装: 克隆仓库: git clone...
Wordpress_cve-2019-9787_defense
Wordpresscve-2019-9787defense Notice This is a project by Sijia Zhanghttps://github.com/sijiahi and Bowen Zhouhttps://github.com/KonjakZhou Prerequisite: 1 Recurrence Attack: root@kitploit: - Configure and install Wordpress5.0 under http://localhost/wp-admin/; - Log in Wordpress as admin, post at...
Linux Distros Unpatched Vulnerability : CVE-2019-9787
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occu...
Exploit for Cross-Site Request Forgery (CSRF) in Wordpress
CVE-2019-9787 CSRF PoC Overview PoC of CSRF CVE-2019-9787...
Exploit for Cross-Site Request Forgery (CSRF) in Wordpress
WordpressCVE-2019-9787 Try to reproduce this issue with Docke...
Debian: Security Advisory (DLA-1742-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...