CVE-2017-1002008
CRITICALmembership-simplified-for-oap-members-only < 1.58 - Unauthenticated Arbitrary File Upload via download.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-1002008. PoCs published by The Martian.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in the WordPress plugin 'Membership Simplified' to arbitrarily download sensitive files like wp-config.php or /etc/passwd. It checks for plugin existence and writes the retrieved file to a local file.
Description
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.
Exploits (1)
This exploit leverages a path traversal vulnerability in the WordPress plugin 'Membership Simplified' to arbitrarily download sensitive files like wp-config.php or /etc/passwd. It checks for plugin existence and writes the retrieved file to a local file.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H