Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: WordPress OptimizePress Theme - File Upload Vulnerability
From: Kurt Seifried <kseifried () redhat com>
Date: Sun, 15 Dec 2013 12:36:23 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/14/2013 09:04 AM, cve-assign () mitre org wrote:
http://blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html

 
http://help.optimizepress.com/customer/portal/articles/1381790-important-optimizepress-1-0-security-update

 Important OptimizePress 1.0 Security Update This is an important
announcement for OptimizePress 1.0 users. (Please note this does
NOT apply to OptimizePress 2.0 which is built with a completely
new codebase)

The target of the attack is the following file: 
lib/admin/media-upload.php. It can be used to upload any file to
the wp-content/uploads/optpress/images_comingsoon directory. It
doesn't even change the extension.

Look for the following files: lib/admin/media-upload.php, 
lib/admin/media-upload-lncthumb.php, 
lib/admin/media-upload-sq_button.php

Patch:

if ( !current_user_can('add_users') ) { echo 'You cannot access
this file. Sorry.'; exit; }

Use CVE-2013-7102.

FYI this issue has been assigned a CVE.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
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=r0IP
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • Re: WordPress OptimizePress Theme - File Upload Vulnerability Kurt Seifried (Dec 16)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]