CVE-2012-10027
CRITICALWP-Property < 1.35.0 - Unauthenticated Arbitrary File Upload via uploadify.php
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-10027.
PoCs published by Metasploit, Sammy FORGIT, including Metasploit module exploits/unix/webapp/wp_property_upload_exec.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated file upload vulnerability in WP-Property <= 1.35.0, allowing arbitrary PHP code execution via a malicious file upload to the uploadify.php endpoint.
Description
WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory without authentication, leading to remote code execution.
Exploits (3)
This Metasploit module exploits an unauthenticated file upload vulnerability in WP-Property <= 1.35.0, allowing arbitrary PHP code execution via a malicious file upload to the uploadify.php endpoint.
This exploit demonstrates an arbitrary file upload vulnerability in WP-Property plugin (v1.35.0) by leveraging the `uploadify.php` endpoint to upload a malicious PHP file (`lo.php`). The PoC uses cURL to send a POST request with the file payload, allowing remote code execution (RCE) via the uploaded shell.
This Metasploit module exploits an unauthenticated file upload vulnerability in the WordPress WP-Property plugin (CVE-2012-10027), allowing arbitrary PHP code execution by uploading a malicious file via the uploadify.php endpoint.
References (6)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X