Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbChloe ChamberlandWPVDB-ID:4CF4E024-DEB9-48C8-8F89-33481E16DB9E
HistoryAug 13, 2020 - 12:00 a.m.

Quiz and Survey Master < 7.0.1 - Arbitrary File Upload

2020-08-1300:00:00
Chloe Chamberland
wpscan.com
7

0.012 Low

EPSS

Percentile

85.4%

JSON

This flaw made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution.

PoC

Set-up quiz that accepts file uploads, then upload file and change content-type to one set as approved.

CPENameOperatorVersion
quiz-master-nextlt7.0.1

Related

cve 1
cvelist 1
wpexploit 1
prion 1
nvd 1
openvas 1
cve
cve
CVE-2020-35949
2021-01-01 04:15:13
cvelist
cvelist
CVE-2020-35949
2021-01-01 03:27:33
wpexploit
wpexploit
Quiz and Survey Master < 7.0.1 - Arbitrary File Upload
2020-08-13 00:00:00
prion
prion
Design/Logic Flaw
2021-01-01 04:15:00
nvd
nvd
CVE-2020-35949
2021-01-01 04:15:13
openvas
openvas
WordPress Quiz And Survey Master Plugin < 7.0.1 Multiple Vulnerabilities
2020-08-20 00:00:00

0.012 Low

EPSS

Percentile

85.4%

JSON
Related for WPVDB-ID:4CF4E024-DEB9-48C8-8F89-33481E16DB9E
cve1cvelist1wpexploit1prion1nvd1openvas1