CVE-2024-7627
HIGHBit File Manager 6.0-6.5.5 - Unauthenticated Remote Code Execution via Temporary File Race Condition
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-7627. PoCs published by siunam321, lkmn1.
AI-analyzed exploit summary This PoC exploits a race condition in WordPress plugin Bit File Manager (versions 6.0-6.5.5) to achieve unauthenticated remote code execution via a temporary file in a publicly accessible directory. The script uses asynchronous requests to win the race condition and execute arbitrary commands.
Description
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated attackers to execute code on the server if an administrator has allowed Guest User read permissions.
Exploits (2)
This PoC exploits a race condition in WordPress plugin Bit File Manager (versions 6.0-6.5.5) to achieve unauthenticated remote code execution via a temporary file in a publicly accessible directory. The script uses asynchronous requests to win the race condition and execute arbitrary commands.
This is a functional PoC exploit for CVE-2024-7627, leveraging a race condition in the Bit File Manager WordPress plugin to achieve unauthenticated RCE via temporary PHP file creation and execution.
References (4)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H