CVEs-PoC/2007/CVE-2007-2484.md

CVE-2007-2484

Description

PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.

POC

Reference

• https://www.exploit-db.com/exploits/3824
• https://www.exploit-db.com/exploits/3824

Github

No PoCs found on GitHub currently.