WordPress Holding Pattern Theme Arbitrary File Upload Exploit

This module exploits a file upload vulnerability in all versions of the Holding Pattern theme found in the uploadfile.php script which contains no session or file validation. It allows unauthenticated users to upload files of any type and subsequently execute PHP scripts in the context of the web...

WordPress Holding Pattern Theme Arbitrary File Upload

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'socket' class Metasploit3 'WordPress Holding Pattern Theme Arbitrary File Upload', 'Description' = %q This module exploits a file upload...

WordPress Holding Pattern Theme Arbitrary File Upload (CVE-2015-1172)

An unauthorized file upload vulnerability has been reported in WordPress Holding Pattern Theme. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...

WordPress Holding Pattern Theme 0.6 File Upload

File upload vulnerability in WordPress Holding Pattern Theme admin/upload-file.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme aka holdingpattern 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an...

WordPress Theme Holding Pattern - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'socket' class MetasploitModule 'WordPress Holding Pattern Theme Arbitrary File Upload', 'Description' = %q This module exploits a file...

WordPress Holding Pattern Theme Arbitrary File Upload

This module exploits a file upload vulnerability in all versions of the Holding Pattern theme found in the uploadfile.php script which contains no session or file validation. It allows unauthenticated users to upload files of any type and subsequently execute PHP scripts in the context of the web...

CVE-2015-1172: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme aka holdingpattern 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an...

WordPress Holding Pattern Theme Arbitrary File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Holding Pattern Theme suffers from an arbitrary file upload vulnerability due to the program failing to adequately...

Wordpress Theme Holding Pattern Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Holding Pattern Arbitrary File Upload Vulnerability Source: https://github.com/heyjoeb/fenix/tree/master/wp-content/themes/holdingpattern Author: terrorist Email: email protected Team: GHC - Georgian Hacking...

PT-2015-5144

Name of the Vulnerable Software and Affected Versions Holding Pattern theme aka holding pattern version 0.6 and earlier Description The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension to the admin/upload-file.php endpoint, and then accessing it...

WordPress Holding Pattern Theme <= 0.6 - Unrestricted File Upload

This vulnerability allows an attacker to upload arbitrary files. The application uses limited validation which means unauthorized upload is allowed. Solution Update the theme...