Modern Events Calendar Lite < 5.16.5 - Arbitrary File Upload via CSV Import
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2021-24145.
PoCs published by Ron Jost, dnr6419, Nguyen Van Khanh, Ron Jost, including Metasploit module exploits/multi/http/wp_plugin_modern_events_calendar_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages an arbitrary file upload vulnerability in the Modern Events Calendar Lite WordPress plugin (versions before 5.16.5) by bypassing file type checks via the 'text/csv' content-type. It uploads a PHP shell (p0wny-shell) to achieve remote code execution.
Description
Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request.
Exploits (3)
This exploit leverages an arbitrary file upload vulnerability in the Modern Events Calendar Lite WordPress plugin (versions before 5.16.5) by bypassing file type checks via the 'text/csv' content-type. It uploads a PHP shell (p0wny-shell) to achieve remote code execution.
This repository contains a functional exploit for CVE-2021-24145, an arbitrary file upload vulnerability in the Modern Events Calendar Lite WordPress plugin (versions before 5.16.5). The PoC authenticates as an admin, uploads a malicious PHP shell disguised as a CSV file, and achieves remote code execution.
This Metasploit module exploits an arbitrary file upload vulnerability in the WordPress Modern Events Calendar plugin (CVE-2021-24145) by bypassing file extension checks via the `text/csv` content-type, allowing authenticated attackers to upload and execute a PHP payload.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H