CVE-2024-51788
CRITICALThe Novel Design Store Directory <4.3.0 - Unrestricted Upload of Fi...
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-51788. PoCs published by Nxploited, Boshe99.
AI-analyzed exploit summary This is a functional exploit for CVE-2024-51788, an unauthenticated arbitrary file upload vulnerability in the WordPress Novel Design Store Directory plugin. It uploads a PHP web shell to achieve remote code execution.
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through <= 4.3.0.
Exploits (2)
This is a functional exploit for CVE-2024-51788, an unauthenticated arbitrary file upload vulnerability in the WordPress Novel Design Store Directory plugin. It uploads a PHP web shell to achieve remote code execution.
The repository contains functional exploit code for CVE-2024-51788, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the exploit by uploading a malicious file to a vulnerable endpoint.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H