WP_CROP_RCE

Rapporto di analisi di WordPress Image CROP RCE POC & Dockekfile : https://github.com/synod2/WPCROPRCE Questo documento affronta le vulnerabilità CVE-2019-8942 e CVE-2019-8943, note come WordPress Image CROP RCE, riscontrate nelle versioni di WordPress precedenti alla 4.9.9 e alla 5.0.1...

CVE-2007-3544

Unrestricted file upload vulnerability in 1 wp-app.php and 2 app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors, possibly related to the wppostmeta table and the use of custom fields in normal...

CVE-2007-3544

CVE-2007-3544 describes an unrestricted file upload in WordPress 2.2.1 and WordPress MU 1.2.3 affecting (1) wp-app.php and (2) app.php. The issue allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors, with possible linkage to the wp_postmeta table and ...

WordPress Custom字段任意文件上传漏洞

WordPress是一款基于WEB的网络日记程序。 WordPress custom字段处理存在任意文件上传问题，远程攻击者可以利用漏洞上传PHP脚本文件并以WEB进程权限执行。 WordPress允许上传受限制的文件附件，名字标题和其他值存储在posttype=attachment的wpposts表中，路径和其他文件属性使用特定字段wpattachedfile和wpattachmentmetadata中的wppostmeta表中。...