CVE-2020-35949 File upload in n/a
Unauthenticated attackers can upload arbitrary PHP files by bypassing Content-Type checks, leading to remote code execution on WordPress sites using the Quiz and Survey Master plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-35949?
CVE-2020-35949 is a critical vulnerability in n/a, published on 1 Jan 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution. If a quiz question could be answered by uploading a file, only the Content-Type header was checked during the upload, and thus the attacker could use text/plain for a .php file.
Weakness: CWE-434
Which versions are affected by CVE-2020-35949?
It affects 1 product.
Products include Expresstech Quiz and Survey Master.
How do I fix CVE-2020-35949?
No fix has been published for CVE-2020-35949 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-35949 being exploited?
There is no known exploitation of CVE-2020-35949 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2024-3592 SQL injection in Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
- CVE-2020-35951 Missing authorization in n/a
- CVE-2024-5606 Quiz And Survey Master < 9.0.2 - Contributor+ SQLi
- CVE-2022-0180 Cross-site request forgery in Quiz And Survey Master
- CVE-2021-24221 Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode
Sources
Also known as GHSA-j7g6-6g73-449h.