CVE-2018-19487 PoC — WordPress WP-jobhunt插件信息泄露漏洞

Description

CVE-2018-19487, CVE-2018-19488, exploit for WordPress wp-jobhunt plugin

介绍

# wp-jobhunt-exploit
CVE-2018-19487, CVE-2018-19488, exploit for WordPress wp-jobhunt plugin

wp-jobhunt plugin is a plugin used with JobCareer theme:

https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636 (see changelog at the bottom)


Python exploit for **CVE-2018-19487** (AJAX user information disclosure) and **CVE-2018-19488** (AJAX user reset password) for version 2.2 and before.


**REQUIREMENTS:**
- requests
- urllib
- json


**HOW TO USE:**

Check if vulnerable to user enumeration:

```python poc.py --checkenum https://wpsite/path/to/wp-admin/admin-ajax.php```


Check if vulnerable to user reset pass:

```python poc.py --checkreset https://wpsite/path/to/wp-admin/admin-ajax.php```


Exploit user enumeration:

```python poc.py --enum https://wpsite/path/to/wp-admin/admin-ajax.php```


Exploit user reset password:

```python poc.py --reset https://wpsite/path/to/wp-admin/admin-ajax.php```

文件快照

备注