Showing 1 - 3 of 3

CVE-2018-12895

Status Candidate

Overview

WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges.

Related Files

WordPress 4.9.6 Arbitrary File Deletion: Posted Oct 25, 2021; Authored by samguy; WordPress version 4.9.6 arbitrary file deletion exploit. Original discovery of this vulnerability is attributed to VulnSpy in June of 2018.; tags | exploit, arbitrary; advisories | CVE-2018-12895; SHA-256 | 9e26b80d1679329336158f3cd64555119dd28f5c169070eeb582f83fd788eb26; Download | Favorite | View

Debian Security Advisory 4250-1: Posted Jul 18, 2018; Authored by Debian | Site debian.org; Debian Linux Security Advisory 4250-1 - A vulnerability was discovered in Wordpress, a web blogging tool. It allowed remote attackers with specific roles to execute arbitrary code.; tags | advisory, remote, web, arbitrary; systems | linux, debian; advisories | CVE-2018-12895; SHA-256 | a5566c4d6c3ff4cce07c6ff6db1e32b5d3268f93a58bd14f983fce210757e85d; Download | Favorite | View

WordPress 4.9.6 Arbitrary File Deletion: Posted Jun 27, 2018; Authored by VulnSpy; WordPress versions 4.9.6 and below suffer from an arbitrary file deletion vulnerability.; tags | exploit, arbitrary; advisories | CVE-2018-12895; SHA-256 | 1589e4eaf271e35db060eff34d24d15cfb71d5bae5799b93614fd17aea098795; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 293 files
Ubuntu 64 files
Debian 22 files
Gentoo 8 files
Google Security Research 7 files
LiquidWorm 6 files
Apple 5 files
Jann Horn 3 files
Spencer McIntyre 3 files
Milad Karimi 3 files

File Archives

Systems

AIX (430)
Apple (2,132)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,175)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,607)
HPUX (881)
iOS (395)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (52,140)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,480)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (10,022)
UNIX (9,482)
UnixWare (188)
Windows (6,785)
Other

CVE-2018-12895

Overview

Related Files

File Archive:

December 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems