# N/A
## 漏洞概述
在WordPress 4.9.2及以下版本中，未认证的攻击者可以通过利用大量注册的.js文件（来自wp-includes/script-loader.php），构造一系列请求来多次加载每个文件，从而导致拒绝服务（资源消耗）。
## 影响版本
WordPress 4.9.2及以下版本
## 漏洞细节
攻击者利用WordPress中大量注册的.js文件，特别是来自`wp-includes/script-loader.php`的文件，构造一系列请求，多次加载每个文件，导致服务器资源耗尽。
## 漏洞影响
该漏洞会导致拒绝服务（资源消耗），攻击者可以通过持续请求消耗服务器资源，最终使网站无法正常响应。
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Apache RewriteRule to mitigate potential DoS attack via Wordpress wp-admin/load-scripts.php file | https://github.com/yolabingo/wordpress-fix-cve-2018-6389 | POC详情 |
| 2 | CVE-2018-6389 Exploit In WordPress DoS | https://github.com/safebuffer/CVE-2018-6389 | POC详情 |
| 3 | A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389 | https://github.com/rastating/modsecurity-cve-2018-6389 | POC详情 |
| 4 | WordPress DoS (CVE-2018-6389) | https://github.com/knqyf263/CVE-2018-6389 | POC详情 |
| 5 | Patch Wordpress DOS breach (CVE-2018-6389) in PHP | https://github.com/JulienGadanho/cve-2018-6389-php-patcher | POC详情 |
| 6 | Metasploit module for WordPress DOS load-scripts.php CVE-2018-638 | https://github.com/dsfau/wordpress-CVE-2018-6389 | POC详情 |
| 7 | Global Fix for Wordpress CVE-2018-6389 | https://github.com/Jetserver/CVE-2018-6389-FIX | POC详情 |
| 8 | Proof of Concept of vunerability CVE-2018-6389 on Wordpress 4.9.2 | https://github.com/thechrono13/PoC---CVE-2018-6389 | POC详情 |
| 9 | None | https://github.com/BlackRouter/cve-2018-6389 | POC详情 |
| 10 | None | https://github.com/alessiogilardi/PoC---CVE-2018-6389 | POC详情 |
| 11 | CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service <= 4.9.4 | https://github.com/JavierOlmedo/wordpress-cve-2018-6389 | POC详情 |
| 12 | Tries to exploit a WordPress vulnerability (CVE-2018-6389) which can be used to cause a Denial of Service. | https://github.com/m3ssap0/wordpress_cve-2018-6389 | POC详情 |
| 13 | Improved DOS exploit for wordpress websites (CVE-2018-6389) | https://github.com/s0md3v/Shiva | POC详情 |
| 14 | None | https://github.com/mudhappy/Wordpress-Hack-CVE-2018-6389 | POC详情 |
| 15 | WP-DOS-Exploit-CVE-2018-6389 | https://github.com/armaanpathan12345/WP-DOS-Exploit-CVE-2018-6389 | POC详情 |
| 16 | Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks | https://github.com/ItinerisLtd/trellis-cve-2018-6389 | POC详情 |
| 17 | Exploit for vulnerability CVE-2018-6389 on wordpress sites | https://github.com/Zazzzles/Wordpress-DOS | POC详情 |
| 18 | CVE-2018-6389 PoC node js multisite with proxy | https://github.com/fakedob/tvsz | POC详情 |
| 19 | load-scripts.php file, which purpose is to retrieve several JavaScript packages through one single request. | https://github.com/vineetkia/Wordpress-DOS-Attack-CVE-2018-6389 | POC详情 |
| 20 | CVE-2018-6389: WordPress <= 4.9.x 拒绝服务(DOS)漏洞 | https://github.com/ianxtianxt/CVE-2018-6389 | POC详情 |
| 21 | it is the official Fix of Wordpress CVE-2018-6389. | https://github.com/amit-pathak009/CVE-2018-6389-FIX | POC详情 |
| 22 | None | https://github.com/NemesisCyberForce/WordPress-CVE-2018-6389 | POC详情 |
暂无评论