CVE-2012-3576
wpStoreCart < 2.5.30 - Unauthenticated Arbitrary File Upload and Remote Code Execution via upload.php
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-3576. PoCs published by Sammy FORGIT, Ydvmtzv.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in wpStoreCart WordPress plugin versions 2.5.27-2.5.29. It uses cURL to upload a malicious PHP file (lo.php) to the vulnerable endpoint, achieving remote code execution.
Description
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.
Exploits (2)
This exploit demonstrates an arbitrary file upload vulnerability in wpStoreCart WordPress plugin versions 2.5.27-2.5.29. It uses cURL to upload a malicious PHP file (lo.php) to the vulnerable endpoint, achieving remote code execution.
This is a bash script that exploits an arbitrary file upload vulnerability in the wpStoreCart WordPress plugin before version 2.5.30 (CVE-2012-3576). It sends a POST request to upload a file to the vulnerable endpoint and checks for a successful response.