EDB-ID-46989 Description: Exploiting Linux platform inwards category local exploits.
From Exploit Database as well as Vulners
Showing posts with label Vulnerability. Show all posts
Showing posts with label Vulnerability. Show all posts
Edb-Id-46989: Centos 7.6 - 'Ptrace_Scope' Privilege Escalation Exploit
Read User's Comments(0)
Edb-Id-47187: Wordpress Database Backup (5.2 Too Lower) Ascendance Injection Vulnerability Too Remote Code Execution (Metasploit)
- EDB-ID: 47187
- Author: Metasploit
- Type: Remote
- Platform: PHP
- Published: 2019-07-29
There exists a ascendency injection vulnerability inwards the Wordpress plugin
wp-database-backup for versions < 5.2.For the backup functionality, the plugin generates a mysqldump command to execute.
The user tin pick out specific tables to exclude from the backup by setting the
wp_db_exclude_table parameter inwards a POST asking to the wp-database-backup page.The names of the excluded tables are included inwards the mysqldump ascendency unsanitized.
Arbitrary commands injected through the
wp_db_exclude_table parameter are executed each fourth dimension the functionality for creating a novel database backup are run.Authentication is required to successfully exploit this vulnerability.
You tin read to a greater extent than close this vulnerability inwards here: OS Command Injection Vulnerability Patched In WP Database Backup Plugin
EDB-ID-47187 Remote Code Execution (Metasploit Module)
From Exploit Database
Subscribe to:
Posts (Atom)