CVE-2020-24186
85Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 10epss 95%
de la publicación al arma287 días
Publicada en NVD24 ago
1ª PoC+287d
metasploit21 feb
probabilidad de explotación
95%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
11 exploit(s) público(s)
A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N
Productos afectados
n/a · n/aPoCs públicas encontradas — 11
exploitdbwww.exploit-db.com/exploits/49967no verificadoexploitdbwww.exploit-db.com/exploits/49962no verificadogithubgithub.com/hev0x/CVE-2020-24186-wpDiscuz-7.0.4-RCE★ 19githubgithub.com/substing/CVE-2020-24186_reverse_shell_upload★ 13githubgithub.com/Sakura-501/CVE-2020-24186-exploit★ 3githubgithub.com/meicookies/CVE-2020-24186★ 0githubgithub.com/GazettEl/CVE-2020-24186★ 0githubgithub.com/sec-dojo-com/CVE-2020-24186★ 0cve_referencepacketstormsecurity.com/files/162983/WordPress-wpDiscuz-7.0.4-Shell-Upload.htmlno verificadocve_referencepacketstormsecurity.com/files/163302/WordPress-wpDiscuz-7.0.4-Shell-Upload.htmlno verificadocve_referencepacketstormsecurity.com/files/163012/WordPress-wpDiscuz-7.0.4-Remote-Code-Execution.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/162983/WordPress-wpDiscuz-7.0.4-Shell-Upload.htmlhttp://packetstormsecurity.com/files/163012/WordPress-wpDiscuz-7.0.4-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/163302/WordPress-wpDiscuz-7.0.4-Shell-Upload.htmlhttps://www.wordfence.com/blog/2020/07/critical-arbitrary-file-upload-vulnerability-patched-in-wpdiscuz-plugin/