9.8

CVE-2017-16949

Exploit

AccessPress Anonymous Post Pro <= 3.1.9 - Unauthenticated Arbitrary File Upload

An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.
Mögliche Gegenmaßnahme
accesspress-anonymous-post-pro: Update to version 3.2.0, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt accesspress-anonymous-post-pro
Version [*, 3.2.0)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Accesspressthemes ≫ Anonymous Post Pro SwPlatformwordpress Version <= 3.1.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 38.79% 0.971
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://wpvulndb.com/vulnerabilities/8977
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/43324/
Third Party Advisory
Exploit
VDB Entry