Description
The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file, nor perform any capability or authorization check, before saving it to a web-accessible directory, allowing any authenticated user such as a subscriber to upload arbitrary PHP files and achieve remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | mView 豆瓣电影 | ≤ 1.0.3 | — |
References
- https://wpscan.com/vulnerability/c1fd09cb-0df7-4643-a888-1873c90e7b64/ exploit vdb-entry technical-description