HexBrain

Eternal · Report #114389

Remote File Upload Vulnerability in business-blog.zomato.com

Validstatus
1upvotes
6 Mar 2016disclosed

How it was found

hi

https://business-blog.zomato.com installed an outdated MailPoet Plugin which vulnerable to Remote File Upload Vulnerability in WordPress MailPoet Plugin (wysija-newsletters)

related article: https://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html

https://business-blog.zomato.com/wp-content/plugins/wysija-newsletters/readme.txt

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original