CVE-2020-12800

The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supportedtype to php% and uploading a .php% file...

WordPress Drag And Drop Plugin Remote Code Execution (CVE-2020-12800)

A remote code execution vulnerability exists in WordPress Drag And Drop plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-12800

CVE-2020-12800 affects the WordPress plugin “Drag and Drop Multi File Upload – Contact Form 7” (prior to 1.3.3.3). The underlying flaw is in the file upload handling, where the allowed_type/filter can be bypassed by using a php% value, enabling uploading a .php% file and enabling remote code exec...

CVE-2020-12800

The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supportedtype to php% and uploading a .php% file...

WordPress Drag And Drop Multi File Uploader Remote Code Execution

This Metasploit module exploits a file upload feature of Drag and Drop Multi File Upload - Contact Form 7 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Drag and Drop Multi File...

Wordpress Drag and Drop Multi File Uploader RCE

This module exploits a file upload feature of Drag and Drop Multi File Upload - Contact Form 7 for versions prior to 1.3.4. The allowed file extension list can be bypassed by appending a %, allowing for php shells to be uploaded. No authentication is required for exploitation. This module require...

CVE-2020-12800

creationtimestamp| type| source ---|---|--- 2020-05-27 20:52:19+00:00| published-proof-of-concept| https://t.me/LearnExploit/896 2020-06-04 15:45:09+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wpdndmulfilerce.rb 2022-06-20 19:53:12+00:00|...

WordPress Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution Exploit Author: Austin Martin Google Dork: inurl:wp-content/uploads/wpdndcf7uploads/ Google Dork:...

Exploit for Unrestricted Upload of File with Dangerous Type in Codedropz Drag_And_Drop_Multiple_File_Upload_-_Contact_Form_7

CVE-2020-12800 POC Script for CVE-2020-12800: RCE throug...