CVE-2021-24499
CRITICAL EXPLOITED IN THE WILD NUCLEIWorkreap < 2.2.2 - Unauthenticated Arbitrary File Upload via AJAX Temp File Uploader
Title source: llmExploitation Summary
CVE-2021-24499 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 6 public exploits from researchers including Mohammad Hossein Khanaki, j4k0m, jayhutajulu1. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages an unauthenticated file upload vulnerability in WordPress Theme Workreap 2.2.2 to achieve remote code execution. It uploads a malicious PHP file via the 'workreap_award_temp_file_uploader' action and executes arbitrary commands.
Description
The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to the uploads/workreap-temp directory. Uploaded files were neither sanitized nor validated, allowing an unauthenticated visitor to upload executable code such as php scripts.
Exploits (6)
This exploit leverages an unauthenticated file upload vulnerability in WordPress Theme Workreap 2.2.2 to achieve remote code execution. It uploads a malicious PHP file via the 'workreap_award_temp_file_uploader' action and executes arbitrary commands.
This repository contains a functional exploit for CVE-2021-24499, which allows unauthenticated file upload leading to remote code execution in the Workreap WordPress theme. The exploit leverages two AJAX actions that lack nonce checks to upload a malicious PHP shell.
This repository contains a functional exploit for CVE-2021-24499, an unauthenticated arbitrary file upload vulnerability in the Workreap WordPress theme. The exploit leverages the `workreap_award_temp_file_uploader` AJAX action to upload a PHP shell, leading to remote code execution.
This repository contains a functional exploit for CVE-2021-24499, an unauthenticated file upload vulnerability in the Workreap WordPress theme. The exploit leverages the `workreap_award_temp_file_uploader` AJAX action to upload a malicious PHP file (`abe.php`) to the target server, leading to remote code execution.
This repository provides a functional exploit PoC for CVE-2021-24499, a vulnerability in the Akismet plugin for WordPress. It includes Docker configurations to set up both vulnerable and patched environments, allowing researchers to test the exploit in a controlled setting.
The repository contains a functional exploit for CVE-2021-24499, targeting an unauthenticated file upload vulnerability in the Workreap WordPress theme. The exploit uploads a malicious PHP shell via the `workreap_award_temp_file_uploader` AJAX action, leading to remote code execution.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H