WPvivid Backup & Migration's import upload handler (AJAX action wpvivid_upload_import_files) saved the uploaded file with WordPress's file-type check turned off and validated only a separate 'name' field, so an administrator account could place a file with any extension, including a PHP script, in the plugin's import directory under... Weiterlesen: Arbitrary File Upload in WPvivid Backup & Migration Import Upload Han…
Intelligence View
⚡ tsecurity.de Intelligence
Arbitrary File Upload in WPvivid Backup & Migration Import Upload Handler
WPvivid Backup & Migration's import upload handler (AJAX action wpvivid_upload_import_files) saved the uploaded file with WordPress's file-type check turned…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir