CVE-2021-24347
HIGH NUCLEISP Project & Document Manager <4.22 - Path Traversal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-24347.
PoCs published by Ron Jost, including Metasploit module exploits/multi/http/wp_plugin_sp_project_document_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary file upload vulnerability in the WordPress plugin SP Project & Document < 4.22. It bypasses security checks by using uppercase letters in the file extension (e.g., `.pHP`) and uploads a malicious PHP payload, which is then triggered to execute arbitrary code.
Description
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from "php" to "pHP".
Exploits (1)
This Metasploit module exploits an arbitrary file upload vulnerability in the WordPress plugin SP Project & Document < 4.22. It bypasses security checks by using uppercase letters in the file extension (e.g., `.pHP`) and uploads a malicious PHP payload, which is then triggered to execute arbitrary code.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H