CVE-2014-10021

This Metasploit module exploits a file upload vulnerability in WordPress WP Symposium plugin (CVE-2014-10021) to achieve remote code execution by uploading a malicious PHP payload. The exploit leverages improper file sanitization in the file_upload_form.php script.

This exploit targets a file upload vulnerability in WordPress WP Symposium 14.11, allowing arbitrary file uploads via an unprotected endpoint. It bypasses extension checks by leveraging a vulnerable upload handler.

This Metasploit module exploits a file upload vulnerability in WP Symposium plugin for WordPress, allowing arbitrary PHP code execution by uploading a malicious PHP file and accessing it directly.