Lucene search

K
wpvulndbWpvulndbWPVDB-ID:3430C642-7151-422C-ABAE-98BEA04C5744
HistoryOct 27, 2023 - 12:00 a.m.

Dropbox Folder Share <= 1.9.7 - Unauthenticated Remote Code Execution via LFI

2023-10-2700:00:00
wpscan.com
7
dropbox
folder share
unauthenticated
remote code execution
lfi
path validation

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

48.5%

Description The plugin does not validate the path and name of a file before including it, allowing unauthenticated visitors to include and execute arbitrary php files on the server, leading to remote code execution.

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

48.5%

Related for WPVDB-ID:3430C642-7151-422C-ABAE-98BEA04C5744