CVE-2020-36705

CRITICALNuclei

Adning Advertising <= 1.5.5 - Arbitrary File Upload

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2020-36705 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the _ning_upload_image function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jul 7, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 26, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Adning Advertising

Browse tunafish / Adning Advertising

Default status: unaffected

CVE ListThrough 1.5.5affected

adning_advertising

Browse tunasite / adning_advertising
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALAdning Advertising <= 1.5.5 - Arbitrary File UploadCVSS 9.8

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the _ning_upload_image function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

Impact

Unauthenticated attackers can upload malicious files to achieve remote code execution, potentially compromising the entire WordPress site and server.

Remediation

Fixed in 1.5.6

AuthorsDhiyaneshDK
Template tagscvecve2020wordpresswp-pluginangwpwppassivevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:tunasite:adning_advertising:*:*:*:*:*:wordpress:*:*
https://blog.nintechnet.com/critical-vulnerability-in-adning-advertising-plugin-actively-exploited-in-the-wild/ https://codecanyon.net/item/wp-pro-advertising-system-all-in-one-ad-manager/269693 https://wpscan.com/vulnerability/e9873fe3-fc06-4a52-aa32-6922cab7830c https://www.wordfence.com/threat-intel/vulnerabilities/id/4a263b74-e9ae-4fd2-be9b-9b8e9eee5982?source=cve

Source: ProjectDiscovery

References

6