cleantalk
Vulnerabilities and Security Researches

WPshop 2 – E-Commerce, 85bb2718-2228-4405-8b50-76995dbf6862

Published on
-
Research Description
WPshop 2 &#8211; E-Commerce [wpshop] < 1.3.9.6 Wpshop - eCommerce &lt;= 1.3.9.5 - Arbitrary File Upload The script &#039;includes/ajax.php&#039; allows execution of various actions by anonymous users. The action name is provided in the &#039;elementCode&#039; parameter. One of these actions is named &#039;ajaxUpload&#039;. This function allows for upload of arbitrary files, due to lack of sanitation of user input.
Affected versions
max 1.3.9.6.
Status
vulnerable