CVE-2014-9308
WP EasyCart < 3.0.8 - Authenticated Arbitrary File Upload via Banner Upload Script
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2014-9308.
PoCs published by Metasploit, Kacper Szurek, Kacper Szurek, rastating, including Metasploit module exploits/unix/webapp/wp_easycart_unrestricted_file_upload.
AI-analyzed exploit summary This Metasploit module exploits an unrestricted file upload vulnerability in WordPress WP EasyCart plugin, allowing remote attackers to upload and execute arbitrary PHP code via the banneruploaderscript.php endpoint.
Description
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in products/banners/.
Exploits (3)
This Metasploit module exploits an unrestricted file upload vulnerability in WordPress WP EasyCart plugin, allowing remote attackers to upload and execute arbitrary PHP code via the banneruploaderscript.php endpoint.
This exploit demonstrates an unrestricted file upload vulnerability in WordPress Shopping Cart 3.0.4, allowing any registered user to upload arbitrary files due to an incorrect if statement in banneruploaderscript.php.
This Metasploit module exploits an unrestricted file upload vulnerability in WordPress WP EasyCart plugin, allowing remote code execution by uploading a malicious PHP file. It supports both WordPress and EasyCart authentication methods.