apcheamitru/wordpress repository overview

⁠Supported tags

• 4.6.0

⁠Summary

This version of WordPress is intentionally vulnerable to CVE-2016-10033 and is intended to be used for academic purposes only.

I added bsd-mailx and exim4 so that I could to allow remote code execution through the lost password page. Direct code execution with Exim looks like this:

 uid=0(root) gid=108(Debian-exim) groups=108(Debian-exim)

For more information, see:

• https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html⁠
• https://nvd.nist.gov/vuln/detail/CVE-2016-10033⁠
• http://www.cvedetails.com/cve/CVE-2016-10033⁠

⁠Dockerfile

 RUN apt-get update \

     && apt-get -y install bsd-mailx
 ADD mail.ini /usr/local/etc/php/conf.d/mail.ini
 ENTRYPOINT ["/entrypoint.sh"]
 CMD ["apache2-foreground"]