CVE-2024-51793
CRITICALWebful Creations Computer Repair Shop <3.8115 - RCE
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2024-51793. PoCs published by JoshuaProvoste, KTN1990, Nxploited.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a WordPress plugin leading to remote command execution (RCE). The exploit uploads a PHP payload via a vulnerable admin-ajax.php action and provides an interactive shell.
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through <= 3.8115.
Exploits (5)
This repository contains a functional proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a WordPress plugin leading to remote command execution (RCE). The exploit uploads a PHP payload via a vulnerable admin-ajax.php action and provides an interactive shell.
This is a Python-based exploit for CVE-2024-51793, targeting an unauthenticated arbitrary file upload vulnerability in the WordPress Computer Repair Shop plugin (versions <= 3.8115). It uploads a PHP shell to vulnerable sites and logs successful exploits.
This is a functional exploit for CVE-2024-51793, targeting an arbitrary file upload vulnerability in the WordPress RepairBuddy plugin (versions <= 3.8115). It uploads a PHP shell to the vulnerable server via a multipart form data request.
The repository contains functional exploit code for CVE-2024-51793, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.
This is a functional exploit for CVE-2024-51793, targeting an unauthenticated arbitrary file upload vulnerability in the Computer Repair Shop WordPress Plugin. It includes vulnerability checking, webshell upload, and verification capabilities.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H