PT-2018-12284 · WordPress+1 · Wordpress+1

Viniciusmarangoni · Publicado 2018-08-10 · Atualizado 2018-10-10 · CVE-2018-14028

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WordPress version 4.9.7

Description The issue allows for the upload of PHP files via the admin area without proper verification as ZIP files. Once uploaded, even though the plugin extraction fails, the PHP file remains in a predictable location within wp-content/uploads, enabling an attacker to execute the file. This poses a security risk, particularly in scenarios where an attacker cannot upload arbitrary PHP code into a valid plugin ZIP file due to restricted permissions in the wp-content/plugins directory.

Recommendations For WordPress version 4.9.7, update to a version that includes the fix for this issue to prevent the upload and execution of unauthorized PHP files.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-14028

Produtos afetados

Debian

Wordpress

Referências · 15

• 🔥 https://github.com/rastating/wordpress-exploit-framework/pull/52 · Exploit
• http://securityfocus.com/bid/105060 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14028 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14028 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14028 · Aviso do Fabricante
• https://packages.debian.org/src:wordpress · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14028 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-14028 · Aviso do Fabricante
• https://core.trac.wordpress.org/ticket/44710 · Nota
• https://osv.dev/vulnerability/CVE-2018-14028 · Aviso do Fabricante
• https://rastating.github.io/unrestricted-file-upload-via-plugin-uploader-in-wordpress · Nota
• https://ubuntu.com/security/CVE-2018-14028 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/wordpress · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-14028 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2018-14028 · Nota de Segurança