PT-2017-14652 · Accesspress · Accesskeys Accesspress Anonymous Post Pro

Colette Chamberland · Publicado 2017-12-18 · Atualizado 2018-01-12 · CVE-2017-16949

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AccessKeys AccessPress Anonymous Post Pro plugin versions through 3.1.9

Description The issue is related to improper input sanitization, allowing an attacker to override settings for allowed file extensions and upload file size. This is due to vulnerabilities in the inc/cores/file-uploader.php and file-uploader/file-uploader-class.php files. An attacker can upload any file to the server, including .php files, by sending a request to the "action=ap file upload action&allowedExtensions[]=php" endpoint at "/wp-admin/admin-ajax.php", resulting in PHP code execution.

Recommendations For AccessKeys AccessPress Anonymous Post Pro plugin versions through 3.1.9, update to a version later than 3.1.9 to resolve the issue.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2017-16949

Produtos afetados

Accesskeys Accesspress Anonymous Post Pro

Referências · 5

• 🔥 https://wpvulndb.com/vulnerabilities/8977 · Exploit
• 🔥 https://exploit-db.com/exploits/43324 · Exploit
• 🔥 http://packetstormsecurity.com/files/145398/Accesspress-Anonymous-Post-Pro-Unauthenticated-Arbitrary-File-Upload.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-16949 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-16949 · Nota de Segurança