PT-2024-34920 · Webful Creations · Webful Creations Computer Repair Shop

Stealthcopter · Published 2024-11-10 · Updated 2026-01-22 · CVE-2024-51793

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Webful Creations Computer Repair Shop versions n/a through 3.8115

Description The issue allows unauthorized upload of malicious files, enabling attackers to compromise web servers by uploading a web shell. This can lead to remote code execution (RCE) and potentially other malicious activities.

Recommendations For versions n/a through 3.8115, update the software to a version that is not affected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-51793

Affected Products

Webful Creations Computer Repair Shop

References · 14

• 🔥 https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-51793 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51793 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51793 · Vendor Advisory
• https://patchstack.com/database/Wordpress/Plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-3-8115-arbitrary-file-upload-vulnerability?_s_id=cve · Note
• https://t.me/latest_high_impact_cve/1493 · Telegram Post
• https://twitter.com/CveFindCom/status/1855853160868266341 · Twitter Post
• https://twitter.com/0dayPublishing/status/2014426902086201471 · Twitter Post
• https://twitter.com/vuldb/status/1855866823344103635 · Twitter Post
• https://twitter.com/CVEnew/status/1855858684703989769 · Twitter Post
• https://patchstack.com/database/vulnerability/computer-repair-shop/wordpress-repairbuddy-plugin-3-8115-arbitrary-file-upload-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/101725 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1856017681045950714 · Twitter Post
• https://twitter.com/JoshuaProvoste/status/1858668072279626138 · Twitter Post
• https://t.me/cvedetector/10468 · Telegram Post