Exploitation Summary
EIP tracks 3 public exploits for CVE-2020-36847.
PoCs published by Md Amanat Ullah (xSwads), ftz7, coiffeur, h00die, including Metasploit module exploits/multi/http/wp_simple_file_list_rce.
AI-analyzed exploit summary This exploit targets a file upload vulnerability in the Simple File List WordPress plugin (CVE-2020-36847), allowing arbitrary file upload and renaming to achieve remote code execution (RCE). It uploads a PHP payload disguised as an image, renames it to a .php file, and verifies execution.
Description
The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be used to rename uploaded PHP code with a png extension to use a php extension. This allows unauthenticated attackers to execute code on the server.
Exploits (3)
This exploit targets a file upload vulnerability in the Simple File List WordPress plugin (CVE-2020-36847), allowing arbitrary file upload and renaming to achieve remote code execution (RCE). It uploads a PHP payload disguised as an image, renames it to a .php file, and verifies execution.
This repository contains a functional exploit for CVE-2020-36847, an arbitrary file upload vulnerability in the WordPress Simple File List plugin (version 4.2.2). The exploit uploads a malicious PHP file disguised as a PNG, renames it to execute PHP code, and confirms RCE by accessing the uploaded shell.
This Metasploit module exploits an unauthenticated file upload vulnerability in the WordPress Simple File List plugin (CVE-2020-36847). It uploads a malicious PHP payload disguised as a PNG file, renames it to a PHP file, and executes it to achieve remote code execution.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H