d:{"metadata":[["$","title","0",{"children":"CVE-2016-15042: 前端文件管理器 < 4.0 与 N-Media 前端发布表单 < 1.1 及 - 任意文件上传 | Kitploit"}],["$","meta","1",{"name":"description","content":"# 前端文件管理器（版本 < 4.0）与 N-Media 前端发布表单（版本 < 1.1）WordPress 插件存在任意文件上传漏洞\n\nWordPress 的 Frontend File Manager（版本 < 4.0）与 N-Media Post Front-end Form（版本 < 1.1）插件因缺少文件类型验证，导致通过 `nm_filemanager_upload_file` 和 `nm_postfront_upload_file` AJAX 操作可进行任意文件上传。这使得未认证攻击者能够在受影响站点的服务器上上传任意文件，从而可能实现远程代码执行。"}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","meta","3",{"name":"google-adsense-account","content":"ca-pub-7669852180477439"}],["$","link","4",{"rel":"canonical","href":"https://kitploit.com/zh/exploits/cve-2016-15042"}],["$","link","5",{"rel":"alternate","hrefLang":"en","href":"https://kitploit.com/en/exploits/cve-2016-15042"}],["$","link","6",{"rel":"alternate","hrefLang":"es","href":"https://kitploit.com/es/exploits/cve-2016-15042"}],["$","link","7",{"rel":"alternate","hrefLang":"zh","href":"https://kitploit.com/zh/exploits/cve-2016-15042"}],["$","link","8",{"rel":"alternate","hrefLang":"ja","href":"https://kitploit.com/ja/exploits/cve-2016-15042"}],["$","link","9",{"rel":"alternate","hrefLang":"ko","href":"https://kitploit.com/ko/exploits/cve-2016-15042"}],["$","link","10",{"rel":"alternate","hrefLang":"ru","href":"https://kitploit.com/ru/exploits/cve-2016-15042"}],["$","link","11",{"rel":"alternate","hrefLang":"fr","href":"https://kitploit.com/fr/exploits/cve-2016-15042"}],["$","link","12",{"rel":"alternate","hrefLang":"ar","href":"https://kitploit.com/ar/exploits/cve-2016-15042"}],["$","link","13",{"rel":"alternate","hrefLang":"hi","href":"https://kitploit.com/hi/exploits/cve-2016-15042"}],["$","link","14",{"rel":"alternate","hrefLang":"pt","href":"https://kitploit.com/pt/exploits/cve-2016-15042"}],["$","link","15",{"rel":"alternate","hrefLang":"de","href":"https://kitploit.com/de/exploits/cve-2016-15042"}],["$","link","16",{"rel":"alternate","hrefLang":"it","href":"https://kitploit.com/it/exploits/cve-2016-15042"}],["$","link","17",{"rel":"alternate","hrefLang":"x-default","href":"https://kitploit.com/en/exploits/cve-2016-15042"}],["$","meta","18",{"property":"og:title","content":"CVE-2016-15042: 前端文件管理器 < 4.0 与 N-Media 前端发布表单 < 1.1 及 - 任意文件上传"}],["$","meta","19",{"property":"og:description","content":"# 前端文件管理器（版本 < 4.0）与 N-Media 前端发布表单（版本 < 1.1）WordPress 插件存在任意文件上传漏洞\n\nWordPress 的 Frontend File Manager（版本 < 4.0）与 N-Media Post Front-end Form（版本 < 1.1）插件因缺少文件类型验证，导致通过 `nm_filemanager_upload_file` 和 `nm_postfront_upload_file` AJAX 操作可进行任意文件上传。这使得未认证攻击者能够在受影响站点的服务器上上传任意文件，从而可能实现远程代码执行。"}],["$","meta","20",{"property":"og:url","content":"https://kitploit.com/zh/exploits/cve-2016-15042/"}],["$","meta","21",{"property":"og:site_name","content":"Kitploit"}],["$","meta","22",{"property":"og:locale","content":"zh"}],["$","meta","23",{"property":"og:image","content":"https://assets.kitploit.com/production/public/exploits/social/canonical/74673/dda601c7823ad42532a936a440eb12342e0f06bf3234a02364abf2bc71f0bd60.png"}],["$","meta","24",{"property":"og:image:secure_url","content":"https://assets.kitploit.com/production/public/exploits/social/canonical/74673/dda601c7823ad42532a936a440eb12342e0f06bf3234a02364abf2bc71f0bd60.png"}],["$","meta","25",{"property":"og:image:width","content":"1200"}],["$","meta","26",{"property":"og:image:height","content":"630"}],["$","meta","27",{"property":"og:image:type","content":"image/png"}],["$","meta","28",{"property":"og:image:alt","content":"CVE-2016-15042 exploit intelligence"}],["$","meta","29",{"property":"og:type","content":"article"}],["$","meta","30",{"property":"article:published_time","content":"2024-10-16T07:31:49.718000Z"}],["$","meta","31",{"property":"article:modified_time","content":"2026-04-08T16:43:49.032000Z"}],["$","meta","32",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","33",{"name":"twitter:title","content":"CVE-2016-15042: 前端文件管理器 < 4.0 与 N-Media 前端发布表单 < 1.1 及 - 任意文件上传"}],"$L37","$L38","$L39","$L3a","$L3b"],"error":null,"digest":"$undefined"}

初级CVSS

总结

来源

负责任的使用