CVE-2020-35489
CRITICALContact Form 7 < 5.3.2 - Unrestricted File Upload and Remote Code Execution via Filename Special Characters
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2020-35489. PoCs published by dn9uy3n, reneoliveirajr, incogbyte.
AI-analyzed exploit summary This repository contains a Python script that checks for the presence of CVE-2020-35489 by verifying the version of the Contact Form 7 WordPress plugin. It does not exploit the vulnerability but scans for vulnerable versions.
Description
The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.
Exploits (5)
This repository contains a Python script that checks for the presence of CVE-2020-35489 by verifying the version of the Contact Form 7 WordPress plugin. It does not exploit the vulnerability but scans for vulnerable versions.
This repository contains a Python-based scanner to detect WordPress sites vulnerable to CVE-2020-35489, a file upload vulnerability in Contact Form 7 plugin versions before 5.3.2. It checks plugin versions via readme.txt but does not include exploit code.
This repository contains a functional exploit for CVE-2020-35489, an unrestricted file upload vulnerability in Contact Form 7 WordPress plugin versions < 5.3.2. The exploit checks for vulnerable versions and attempts to upload a PHP shell by manipulating the file extension and MIME type.
This repository contains a Python-based scanner for detecting CVE-2020-35489, a vulnerability in Contact Form 7. The tool checks for the presence of specific endpoints and responses indicative of the vulnerability but does not include exploit code.
This repository contains a Python script that checks for the presence of vulnerable versions of the WordPress Contact Form 7 plugin (CVE-2020-35489) by fetching the plugin's readme.txt file and comparing the version number. It does not exploit the vulnerability but scans for it.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H