Published: 14/05/2016 Updated: 23/06/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 756

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The Ninja Forms plugin prior to 2.9.42.1 for WordPress allows remote malicious users to conduct PHP object injection attacks via crafted serialized values in a POST request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ninjaforms ninja forms

## # This module requires Metasploit: wwwmetasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::FileDropper include Msf::Exploit::Remote::HTTP::Wordpress def initialize(info = {}) ...

Lab vulnérble WP + Ninja forms CVE 2016-1209 (à ne pas mettre en production)

vulnlab Lab vulnérble WP + Ninja forms CVE 2016-1209 (à ne pas mettre en production)

Metasploitable 3 and Snort rules

Please GO THROUGH THE PDF FILE Cybersecurity_base_project_2 Metasploitable 3 and Snort rules Cyber security base – Project 2 Target – Metasploitable 3 Windows Server 2008 & Ubuntu server 14 STEP 1: Run an Nmap Ping sweep scan to look for potential connected devices $ nmap -sP 19216811/24 STEP 2: Identify Target Host – 192168140 STEP 3: Run an nma

CWE-20 http://www.pritect.net/blog/ninja-forms-2-9-42-critical-security-vulnerabilities https://ninjaforms.com/important-security-update-always-hurt-ones-love/http://jvndb.jvn.jp/jvndb/JVNDB-2016-000064 https://wordpress.org/plugins/ninja-forms/changelog/http://jvn.jp/en/jp/JVN44657371/index.html https://wpvulndb.com/vulnerabilities/8485 http://www.rapid7.com/db/modules/exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload http://packetstormsecurity.com/files/137211/WordPress-Ninja-Forms-Unauthenticated-File-Upload.html https://nvd.nist.gov https://github.com/LeBlogDuHacker/vulnlab https://www.exploit-db.com/exploits/41692/

CVE-2016-1209

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect