PT-2018-13263 · Plainview · Plainview Activity Monitor

Lydéric Lefebvre · Published 2018-08-26 · Updated 2023-02-02 · CVE-2018-15877

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Plainview Activity Monitor plugin versions prior to 20180826

Description The issue allows for OS command injection via shell metacharacters in the ip parameter of a "wp-admin/admin.php?page=plainview activity monitor&tab=activity tools" request.

Recommendations For versions prior to 20180826, update the Plainview Activity Monitor plugin to version 20180826 or later to resolve the issue. As a temporary workaround, consider restricting access to the "wp-admin/admin.php?page=plainview activity monitor&tab=activity tools" endpoint to minimize the risk of exploitation. Avoid using the ip parameter in the affected request until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-15877

Affected Products

Plainview Activity Monitor

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_plainview_activity_monitor_rce.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/45274 · Exploit
• 🔥 http://packetstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html · Exploit
• 🔥❌ https://github.com/aas-n/CVE/tree/master/CVE-2018-15877 · Exploit, Deleted
• 🔥 https://exploit-db.com/exploits/50110 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15877 · Security Note
• https://osv.dev/vulnerability/CVE-2018-15877 · Vendor Advisory