funway/cve-2020-25213 repository overview

⁠CVE-2020-25213 - Custom WordPress with wp-file-manager Vulnerability

This Docker image is based on wordpress:6.7.2-php8.2-apache and has the wp-file-manager:6.0 plugin pre-installed.

⁠Features

• WordPress version 6.7.2
• PHP 8.2 with Apache
• Pre-installed wp-file-manager plugin located at /var/www/html/wp-content/plugins/wp-file-manager/.

⁠Usage

This image does not come with an embedded database. The simplest way to run this container is by using a docker-compose.yml file like the one shown below:

services:

  mariadb:
    image: linuxserver/mariadb:11.4.5
    container_name: mariadb
    environment:
      MYSQL_ROOT_PASSWORD: ROOT_ACCESS_PASSWORD
      MYSQL_DATABASE: wp_test
      MYSQL_USER: wp_user
      MYSQL_PASSWORD: wp_pass

  wordpress:
    image: funway/cve-2020-25213
    container_name: cve-2020-25213
    ports:
      - 8080:80
    environment:
      WORDPRESS_DB_HOST: mariadb
      WORDPRESS_DB_USER: wp_user
      WORDPRESS_DB_PASSWORD: wp_pass
      WORDPRESS_DB_NAME: wp_test

Once the docker-compose.yml file is set up, you can bring up the container using the following command:

docker compose up
## for some version, maybe you should use:
# docker-compose up

After the container is up and running, you can access your WordPress site by visiting http://localhost:8080⁠.

For more details on usage and parameters, please refer to the official WordPress Docker image documentation.

⁠Exploit

https://www.exploit-db.com/exploits/51224⁠