PT-2017-14652 · Accesspress · Accesskeys Accesspress Anonymous Post Pro

Colette Chamberland · Published 2017-12-18 · Updated 2018-01-12 · CVE-2017-16949

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AccessKeys AccessPress Anonymous Post Pro plugin versions through 3.1.9

Description The issue is related to improper input sanitization, allowing an attacker to override settings for allowed file extensions and upload file size. This is due to vulnerabilities in the inc/cores/file-uploader.php and file-uploader/file-uploader-class.php files. An attacker can upload any file to the server, including .php files, by sending a request to the "action=ap file upload action&allowedExtensions[]=php" endpoint at "/wp-admin/admin-ajax.php", resulting in PHP code execution.

Recommendations For AccessKeys AccessPress Anonymous Post Pro plugin versions through 3.1.9, update to a version later than 3.1.9 to resolve the issue.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2017-16949

Affected Products

Accesskeys Accesspress Anonymous Post Pro

References · 5

• 🔥 https://wpvulndb.com/vulnerabilities/8977 · Exploit
• 🔥 https://exploit-db.com/exploits/43324 · Exploit
• 🔥 http://packetstormsecurity.com/files/145398/Accesspress-Anonymous-Post-Pro-Unauthenticated-Arbitrary-File-Upload.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-16949 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-16949 · Security Note