Showing 1 - 3 of 3

CVE-2018-12895

Status Candidate

Overview

WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges.

Related Files

WordPress 4.9.6 Arbitrary File Deletion: Posted Oct 25, 2021; Authored by samguy; WordPress version 4.9.6 arbitrary file deletion exploit. Original discovery of this vulnerability is attributed to VulnSpy in June of 2018.; tags | exploit, arbitrary; advisories | CVE-2018-12895; SHA-256 | 9e26b80d1679329336158f3cd64555119dd28f5c169070eeb582f83fd788eb26; Download | Favorite | View

Debian Security Advisory 4250-1: Posted Jul 18, 2018; Authored by Debian | Site debian.org; Debian Linux Security Advisory 4250-1 - A vulnerability was discovered in Wordpress, a web blogging tool. It allowed remote attackers with specific roles to execute arbitrary code.; tags | advisory, remote, web, arbitrary; systems | linux, debian; advisories | CVE-2018-12895; SHA-256 | a5566c4d6c3ff4cce07c6ff6db1e32b5d3268f93a58bd14f983fce210757e85d; Download | Favorite | View

WordPress 4.9.6 Arbitrary File Deletion: Posted Jun 27, 2018; Authored by VulnSpy; WordPress versions 4.9.6 and below suffer from an arbitrary file deletion vulnerability.; tags | exploit, arbitrary; advisories | CVE-2018-12895; SHA-256 | 1589e4eaf271e35db060eff34d24d15cfb71d5bae5799b93614fd17aea098795; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 229 files
indoushka 167 files
Jay Turla 150 files
Ubuntu 67 files
h00die 54 files
juan vazquez 43 files
sinn3r 41 files
H D Moore 31 files
Karn Ganeshen 23 files
Pedro Ribeiro 22 files

File Archives

Systems

AIX (430)
Apple (2,114)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,124)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (881)
iOS (389)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,237)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (16,845)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,852)
UNIX (9,456)
UnixWare (188)
Windows (6,772)
Other

CVE-2018-12895

Overview

Related Files

File Archive:

September 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems