CVE-2020-8417 PoC — WordPress Code Snippets 跨站请求伪造漏洞

Source

https://github.com/Vulnmachines/WordPress_CVE-2020-8417

Associated Vulnerability

Title:WordPress Code Snippets 跨站请求伪造漏洞 (CVE-2020-8417)
Description:WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress Code Snippets 2.14.0之前版本中存在跨站请求伪造漏洞，该漏洞源于程序没有正确验证用户输入。远程攻击者可借助格式错误的HTTP请求利用该漏洞在易受攻击网站上注入可执行代码。

Description

CSRF Code snippet vulnerability CVE-2020-8417

Readme

# WordPress_CVE-2020-8417
CSRF Code snippet vulnerability CVE-2020-8417

https://www.youtube.com/watch?v=47OBH4N70f0

#### Follow us 
#### [Vulnmachines](https://www.twitter.com/vulnmachines)
#### [YouTube](https://www.youtube.com/c/vulnmachines)
#### [Twitter](https://www.twitter.com/vulnmachines)
#### [Facebook](https://www.facebook.com/vulnmachines)
#### [LinkedIn](https://www.linkedin.com/company/vulnmachines)

File Snapshot


 [4.0K]  /data/pocs/e9de01c12b6607edbe0f3dfc7e27f3f3b04174dd
├── [ 418]  README.md
└── [3.3K]  wp.html

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!