CVE-2018-15877

This PoC exploits an OS command injection vulnerability in the Plainview Activity Monitor WordPress plugin (CVE-2018-15877) by injecting a malicious payload into the 'ip' parameter. The exploit combines CSRF to trick an admin into executing the payload, leading to a reverse shell.

This exploit leverages a command injection vulnerability in the WordPress Plugin Plainview Activity Monitor (version 20161228 and prior) by injecting commands via the 'ip' parameter in the 'activity_tools' tab. It authenticates as a WordPress user and executes arbitrary commands, returning the output to the attacker.

This exploit leverages a command injection vulnerability in the Planview Activity Monitor WordPress plugin (CVE-2018-15877) to achieve remote code execution. It uses Selenium to automate login and inject a reverse shell payload via a manipulated input field.

This repository contains a Docker setup for CVE-2018-15877, a vulnerability in the Plainview Activity Monitor WordPress plugin. The script initializes a vulnerable WordPress environment with MySQL and Apache, activating the vulnerable plugin to demonstrate the exploit.

This repository contains a functional proof-of-concept for CVE-2018-15877, demonstrating an OS command injection vulnerability in the Plainview Activity Monitor WordPress plugin. The exploit leverages the 'ip' parameter in a POST request to execute arbitrary commands on the underlying system.

This Metasploit module exploits a command injection vulnerability in the WordPress Plainview Activity Monitor plugin by injecting a PHP payload into the 'ip' parameter. It requires authentication and targets versions prior to 20180826.