PT-2023-10266 · Upthemes · Designfolio Plus

Crashbandicot · Publicado 2023-03-07 · Atualizado 2024-08-06 · CVE-2015-10087

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UpThemes Theme DesignFolio Plus version 1.2

Description A vulnerability has been found in the software, classified as problematic, which affects an unknown functionality and leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations Apply a patch to fix this issue. Note: Since the product is no longer supported by the maintainer, there might not be an official patch available.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2015-10087

Produtos afetados

Designfolio Plus

Referências · 10

• 🔥 https://github.com/CCrashBandicot/exploit/commit/53f6ae62878076f99718e5feb589928e83c879a9 · Exploit
• 🔥 https://exploit-db.com/exploits/36372 · Exploit
• https://t.me/cvenotify/89368 · Publicação no Telegram
• https://vuldb.com/?ctiid.221809 · Nota
• https://t.me/cvenotify/45748 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-10087 · Nota de Segurança
• https://t.me/cvenotify/64325 · Publicação no Telegram
• https://vuldb.com/?id.221809 · Nota
• https://t.me/cibsecurity/59580 · Publicação no Telegram
• https://support.alertlogic.com/hc/en-us/articles/360028203692-WordPress-Theme-DesignFolio-Plus-1-2-upload-file-php-Arbitrary-File-Upload · Nota