CVE-2018-9035 PoC — WordPress Contact Form 7 to Database Extension插件输入验证错误漏洞

Source

https://github.com/HaiNhat-HUST/CVE-2018-9035

Associated Vulnerability

Title:WordPress Contact Form 7 to Database Extension插件输入验证错误漏洞 (CVE-2018-9035)
Description:WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。Contact Form 7 to Database Extension plugin是使用在其中的一个用于连接Web表单和数据库的插件。 WordPress Contact Form 7 to Database Extension插件2.10.32版本中的ExportToCsvUtf8.php文件中存在CSV注入漏洞。远程攻击者可借助联系表单利用该漏洞将电子表格公

Description

CVE 2018-9035: CSV Injection in Wordpress with plugin Contact Form 7 to Database Extension 2.10.3

File Snapshot


 [4.0K]  /data/pocs/8015b327c20bcbe1e3765de1a6c7dfc1c6a547c6

0 directories, 0 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!