.. / CVE-2020-24186

• RCE
• Nuclei
• Web

Exploit for WordPress wpDiscuz <=7.0.4 - Remote Code Execution (CVE-2020-24186)

Description:

WordPress wpDiscuz plugin versions version 7.0 through 7.0.4 are susceptible to remote code execution. This flaw gave unauthenticated attackers the ability to upload arbitrary files, including PHP files, and achieve remote code execution on a vulnerable site’s server.

Nuclei Template

View the template here CVE-2020-24186.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-24186.yaml

References: