Full Disclosure mailing list archives
Re: WordPress OptimizePress Theme - File Upload Vulnerability
From: Kurt Seifried <kseifried () redhat com>
Date: Sun, 15 Dec 2013 12:36:23 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12/14/2013 09:04 AM, cve-assign () mitre org wrote:
http://blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.htmlhttp://help.optimizepress.com/customer/portal/articles/1381790-important-optimizepress-1-0-security-updateImportant OptimizePress 1.0 Security Update This is an important announcement for OptimizePress 1.0 users. (Please note this does NOT apply to OptimizePress 2.0 which is built with a completely new codebase)The target of the attack is the following file: lib/admin/media-upload.php. It can be used to upload any file to the wp-content/uploads/optpress/images_comingsoon directory. It doesn't even change the extension.Look for the following files: lib/admin/media-upload.php, lib/admin/media-upload-lncthumb.php, lib/admin/media-upload-sq_button.phpPatch:if ( !current_user_can('add_users') ) { echo 'You cannot access this file. Sorry.'; exit; }Use CVE-2013-7102.
FYI this issue has been assigned a CVE. - -- Kurt Seifried Red Hat Security Response Team (SRT) PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAEBAgAGBQJSrgS3AAoJEBYNRVNeJnmTa7wP/1EjYhv5lY1y2S38RCafWtow jy4DT2rf0CrJKi256u/0667DFa46PrRbu34kXu2b+tjgBlx5/gSORND2jIvcSnti dAfRP2q1abGVe0pkbRN8bUINwTS9ITag0ec4pwBVT/4ct9Xmnqi1xgUfuzLca2Vm skjwcW6elbe4L1jEWGqxaC5umPkprKDcq98hCu57CZPhG1Gf2nmA05Icl5YXw7s9 dL7y/VDXkfM66bQfOkceB3SdfktsyI6MC8OLax+mzRr4+Pa3mnlZ12yOr4XDxd3n mlg3pbF+6/vioQM5Qp36iLJ2fINKL9eAtwv/8O40LrwN0QQXQbP9efg/VPzOzztC Dl849SYKfPB5ZAV1bkEZJHkog3WVxMC2f5c/Na/ive4I0iDzrykZA7pydqHd3JcV iwtiIlwqaw4NP+zVi+WOWxpUxlZy3lPPDE8VpvCcEMPQTW8G+MhhLCB098Zr+S04 GGrnmXWiw0pSYHM+DzrqQcHSZon9n17YHAZyc+gYAI4WN/sEhi+tVwlAQacYn9CB FxirWZMR45E9fEbEQtQ4En5zLmgQuY3VMBByqf4eGh111cSvE8fg36TFUtH0H+Od G8HYpUfSXvkkOQa6J13Ve54FK75UCz1jTyvj8XcLZ3kiJm2BfTebwftltnypNgGL VvS3QQNAc5ZeOfGX1i+6 =r0IP -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: WordPress OptimizePress Theme - File Upload Vulnerability Kurt Seifried (Dec 16)