Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Amelia < 1.0.46 - Manager+ RCE
Vulnerability Description
The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amelia Manager" role.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
WordPress plugin Amelia 代码问题漏洞
Vulnerability Description
WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是WordPress开源的一个应用插件。 WordPress plugin Amelia 1.0.47 之前版本存在代码问题漏洞，该漏洞源于Amelia WordPress 插件将图像 blob 存储到扩展名由用户控制的实际文件中，攻击者利用该漏洞可将 PHP 后门上传到网站。 具有自定义“Amelia Manager”角色的登录用户可以
CVSS Information
N/A
Vulnerability Type
N/A