CVE-2017-16949 : An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin

An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.

Published 2017-12-19 02:29:42

Updated 2018-01-12 15:40:06

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-16949

Accesspressthemes » Anonymous Post Pro » For Wordpress
Versions up to, including, (<=) 3.1.9
cpe:2.3:a:accesspressthemes:anonymous_post_pro:*:*:*:*:*:wordpress:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-16949

EPSS FAQ

39.91%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 97 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-16949

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-16949

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-16949

https://wpvulndb.com/vulnerabilities/8977

AccessPress Anonymous Post Pro < 3.2.0 - Unauthenticated Arbitrary File Upload
Exploit;Third Party Advisory;VDB Entry
http://packetstormsecurity.com/files/145398/Accesspress-Anonymous-Post-Pro-Unauthenticated-Arbitrary-File-Upload.html

Accesspress Anonymous Post Pro Unauthenticated Arbitrary File Upload ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/43324/

Accesspress Anonymous Post Pro < 3.2.0 - Arbitrary File Upload
Exploit;Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2017-16949

Products affected by CVE-2017-16949

Exploit prediction scoring system (EPSS) score for CVE-2017-16949

CVSS scores for CVE-2017-16949

CWE ids for CVE-2017-16949

References for CVE-2017-16949