vendor:
PHP Article Publisher
by:
ahmadbady
8,8
CVSS
HIGH
Remote Code Execution
78
CWE
Product Name: PHP Article Publisher
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
remote change password and add admin xpl
This exploit allows an attacker to remotely change the password and add an admin user to the PHP Article Publisher application. The exploit is triggered by sending a POST request to the functions.php page with the id parameter set to 2. The attacker can then set the email and password fields to the desired values.
Mitigation:
The application should validate user input and restrict access to the functions.php page.
