CVE-2019-8943
MEDIUM NUCLEIWordPress <= 5.0.3 - Authenticated Path Traversal via Image Crop Filename
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2019-8943.
PoCs published by Metasploit, allyshka, oussama-rahali, including Metasploit module exploits/multi/http/wp_crop_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits a path traversal and local file inclusion vulnerability in WordPress (CVE-2019-8943) to achieve remote code execution by uploading a malicious image file and including it in the theme.
Description
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.
Exploits (6)
This Metasploit module exploits a path traversal and local file inclusion vulnerability in WordPress (CVE-2019-8943) to achieve remote code execution by uploading a malicious image file and including it in the theme.
This exploit targets a path traversal vulnerability in WordPress (CVE-2019-8943) to achieve remote code execution by manipulating image metadata and leveraging the image cropping functionality to write a malicious PHP file.
This exploit leverages CVE-2019-8943 (and CVE-2019-8942) to achieve remote code execution on WordPress versions 5.0.0 and below by manipulating image uploads and path traversal to execute arbitrary PHP code.
This is a Python-based exploit for CVE-2019-8943, an authenticated remote code execution vulnerability in WordPress. It leverages image upload and path traversal to drop a PHP backdoor.
This Metasploit module exploits a path traversal and local file inclusion vulnerability in WordPress versions 5.0.0 and <= 4.9.8, allowing authenticated users with author privileges to upload a malicious image file and achieve remote code execution.
This repository contains a functional Python exploit for CVE-2019-8943, which targets WordPress versions 5.0.0 and below. The exploit chains authentication, image upload manipulation, and path traversal to achieve remote code execution (RCE) via a crafted image file.
Nuclei Templates (1)
http.component:"wordpress" || cpe:"cpe:2.3:a:wordpress:wordpress"
body="oembed" && body="wp-"
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N