CVE-2021-24347

Related Files

WordPress SP Project And Document Remote Code Execution

Posted Jul 26, 2021

Authored by Ron Jost, Yann Castel | Site metasploit.com

This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in WordPress SP Project and Document plugin versions prior to 4.22. The security check only searches for lowercase file extensions such as .php, making it possible to upload .pHP files for instance. Finally, the uploaded payload can be triggered by a call to /wp-content/uploads/sp-client-document-manager/<user_id>/<random_payload_name>.php.

tags | exploit, arbitrary, shell, php, file upload

advisories | CVE-2021-24347

SHA-256 | 7d2c3f217f9d96a1b8933d18886edae37099a342dcf9addd2e24438914311c20

Download | Favorite | View

WordPress SP Project And Document Manager 4.21 Shell Upload

Posted Jul 8, 2021

Authored by Ron Jost

WordPress SP Project and Document Manager plugin version 4.21 suffers from a remote shell upload vulnerability.

tags | exploit, shell

advisories | CVE-2021-24347

SHA-256 | 803aa45c0f550c1286871610b453544c4160710aaf8afc70040b2f7e0f47a48d

Download | Favorite | View