Vulnerability · Published Jun 14, 2021 · Assigned by WPScan
CVE-2021-24347SP Project & Document Manager <2 4.22 - Authenticated Shell Upload
High 8.8
In plain English
A high-severity security flaw in SP Project & Document Manager from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 54.1% (higher than 99.0% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei.
Official description
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from "php" to "pHP".
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | SP Project & Document Manager | 4.22 – before 4.22 |
Weakness: CWE-178
References
- https://wpscan.com/vulnerability/8f6e82d5-c0e9-468e-acb8-7cd549f6a45a x_refsource_CONFIRM
- http://packetstormsecurity.com/files/163434/WordPress-SP-Project-And-Document-Manager-4.21-Shell-Upload.html x_refsource_MISC
- http://packetstormsecurity.com/files/163675/WordPress-SP-Project-And-Document-Remote-Code-Execution.html x_refsource_MISC