CVE-2020-7048 PoC — WordPress WP Database Reset 安全漏洞

Source

https://github.com/ElmouradiAmine/CVE-2020-7048

Associated Vulnerability

Title: WordPress WP Database Reset 安全漏洞 (CVE-2020-7048)
Description:The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site content stored in that table), as demonstrated by a wp-admin/admin-post.php?db-reset-tables[]=comments URI.

Readme

# CVE-2020-7048
You can watch this video, to reproduce this exploitation
https://www.youtube.com/watch?v=wHBhWVP0ryY&feature=youtu.be&ab_channel=ElmouradiAmine

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →