File tree Expand file tree Collapse file tree 1 file changed +4
-2
lines changed
modules/exploits/unix/webapp Expand file tree Collapse file tree 1 file changed +4
-2
lines changed Original file line number Diff line number Diff line change @@ -16,12 +16,14 @@ class Metasploit3 < Msf::Exploit::Remote
1616 def initialize ( info = { } )
1717 super ( update_info (
1818 info ,
19- 'Name' => 'WordPress Photo Gallery 1.2.5 Unrestricted File Upload' ,
19+ 'Name' => 'WordPress Photo Gallery Unrestricted File Upload' ,
2020 'Description' => %q{Photo Gallery Plugin for WordPress contains a flaw that allows a
2121 remote attacker to execute arbitrary PHP code. This flaw exists
2222 because the photo-gallery\photo-gallery.php script allows access
2323 to filemanager\UploadHandler.php. The post() method in UploadHandler.php
24- does not properly verify or sanitize user-uploaded files.} ,
24+ does not properly verify or sanitize user-uploaded files.
25+
26+ This module was tested on version 1.2.5.} ,
2527 'License' => MSF_LICENSE ,
2628 'Author' =>
2729 [
You can’t perform that action at this time.
0 commit comments