Vdesk Hangupphp3 Exploit |top| < 1080p 2027 >

This subtle difference highlights the complexities of cross-browser vulnerability testing. The exploit was confirmed working on , Internet Explorer 6.0.2900.2180 , and Internet Explorer 7.0.5730.11 .

While hangup.php3 itself is a security feature, other components of the F5 "vdesk" directory have historical vulnerabilities:

: Attackers can download and install web shells, granting them a permanent backdoor into the system. vdesk hangupphp3 exploit

Above all, rely on authoritative sources: CVEs assigned by MITRE and NIST, vendor security advisories, and verified exploit databases. When a search returns no results, the most likely explanation is not a zero-day hiding in the shadows—it is that the phrase itself does not correspond to any known threat.

Here is the provided in the original disclosure: Above all, rely on authoritative sources: CVEs assigned

| CVE ID | Vulnerability Type | Severity (CVSS) | Affected Versions | | :--- | :--- | :--- | :--- | | CVE-2022-45172 | Broken Access Control (Privilege Escalation) | 9.8 (CRITICAL) | ≤ v018 | | CVE-2022-45174 | 2FA Bypass for SAML Users | 9.8 (CRITICAL) | ≤ v018 | | CVE-2022-45173 | 2FA Bypass via Client-Side Manipulation | 9.8 (CRITICAL) | ≤ v018 | | CVE-2022-45171 | Unrestricted Dangerous File Upload | 8.8 (HIGH) | ≤ v018 | | CVE-2022-45170 | Cryptographic Issue (File Decryption) | 6.5 (MEDIUM) | ≤ v018 | | CVE-2022-45168 | 2FA Backup Code Generation Before TOTP Check | 6.5 (MEDIUM) | ≤ v018 | | CVE-2022-45176 | Stored Cross-Site Scripting (XSS) | 5.4 (MEDIUM) | ≤ v018 | | CVE-2022-45177 | Observable Response Discrepancy (Information Disclosure) | 7.5 (HIGH) | ≤ v031 | | CVE-2022-45179 | Basic XSS via Reminders | 5.4 (MEDIUM) | ≤ v031 |

The "vdesk hangupphp3 exploit" is more than a messy keyword; it is a case study in how small mistakes in file handling, combined with outdated language features, can lead to complete server compromise. While few active instances remain, the underlying principles—improper input sanitization, file inclusion, and trust in user-supplied paths—continue to appear in modern web applications using PHP, Python, or Node.js. an unauthenticated attacker could:

[User Browser] ---> ( Sends Invalid Host / Policy Fails ) ^ | 302 Redirect to /vdesk/hangup.php3 v [F5 APM Gateway] ---> [Clears Session State & Deletes Cookies]

Thus, hangup.php3 was a specific script file inside the VDesk directory that handled ticket closure. If the developer forgot to validate the ticket_id parameter or the session token, it could lead to an exploit.

The attacker appends malicious shell commands to the vulnerable parameter within the URL structure. A theoretical example of the attack vector looks like this:

With a successful hangup.php3 exploit, an unauthenticated attacker could:

$f_path = 'the full file path is here'; $f_name = 'the filename is here'; $parent_post_id = 0; // if you would like to attach it to a post, add its ID here $id = wp_insert_attachment( array( 'guid' => $f_path, 'post_mime_type' => mime_content_type( $f_path ), 'post_title' => preg_replace( '/\.[^.]+$/', '', $f_name ), 'post_content' => '', 'post_status' => 'inherit' ), $f_path, $parent_post_id ); // wp_generate_attachment_metadata() won't work if you do not include this file require_once( ABSPATH . 'wp-admin/includes/image.php' ); // Generate and save the attachment metas into the database wp_update_attachment_metadata( $id, wp_generate_attachment_metadata( $id, $f_path ) );

Comments — 49

angel Nov 28, 2017

You saved my life! thank you thank you thank you so much!!

- Misha Nov 29, 2017
  
  I’m happy to help, you’re welcome! 🙃
  
- Rajan K. Jan 1, 2025
  
  Same here
  
bowp Apr 16, 2018

How to upload multiple images?

- Alejandro Jul 9, 2018
  
  ¡Hola!
  
  Add “[]” to the name of the input tag:
  
  <input type="file" name="profilepicture[]" />
  
John Apr 29, 2018

Very good code, thank you!
You helped me with my graduation.

Oliver Adams May 31, 2018

I have the following error: “Call to undefined function mime_content_type()”

- Misha Jun 2, 2018
  
  Hey Oliver,
  
  What is your PHP version?
  
Alejandro Jul 3, 2018

¡Hola Misha! Hi! Gracias, Thank you.

Sorry to bother you, in case you could guide me. I am a photographer and I would like to add many photos to my WP from home.

I have created a function that generates images of different size to the original that my theme needs (66×66, 200×133 …). Thus the weight of the images is much lower than those automatically generated by WP.

To streamline my workflow in WP, I thought about creating a function to upload the images to / wp-content / uploads / 2018/07 via php (now what I do is copy them directly into the folder of the WP installation).

I have also generated a query to the DB to add the necessary information to wp_post and wp_postmeta for each image.

I can use the uploaded image with no problem, I can add it to an entry or page and it looks correctly, both in the WP editor and later on the web.

However, in the WP media gallery the image is not shown to me. It’s like it does not associate the data in the database with the image that I copied in / uploads / 2018/07.

I have noticed and there is no other reference to the images apart from the ones I have already entered in the MYSQL query.

Maybe what I want to do is complex and I should give up. But I would like to at least know where the error may be.

Thanks for your time.
A hug from Granada, Spain.

- Misha Jul 3, 2018
  Hi Alejandro 🙃
  
  Not sure how your function looks like, but I think the code below should help you.
```
$f_path = 'the full file path is here';
$f_name = 'the filename is here';
$parent_post_id = 0; // if you would like to attach it to a post, add its ID here

$id = wp_insert_attachment( array(
	'guid'           => $f_path,
	'post_mime_type' => mime_content_type( $f_path ),
	'post_title'     => preg_replace( '/\.[^.]+$/', '', $f_name ),
	'post_content'   => '',
	'post_status'    => 'inherit'
), $f_path, $parent_post_id );

// wp_generate_attachment_metadata() won't work if you do not include this file
require_once( ABSPATH . 'wp-admin/includes/image.php' );

// Generate and save the attachment metas into the database
wp_update_attachment_metadata( $id, wp_generate_attachment_metadata( $id, $f_path ) );
```
  P.S. Never give up 💪
  - Alejandro Jul 7, 2018
    
    Thank you very much Misha!
    
    Unfortunately I do not know how to implement what you have indicated :(
    I do not know how to use the WP functions in my code.
    
    I will try to explain what I have done.
    
    I created a .php out of WP with a connection to a BD (out of WP). I have created a function that runs through a directory with photos to be able to visualize them and move them by assigning an order to the photos and adding that information to the BD (out of WP).
    
    My idea is to generate the content of a post outside of WP, including directly on the WordPress DB the information that I add in my BD (out of WP).
    
    When I read your answer I thought, maybe if I move my .php to the WP installation directory, maybe it will work. But I have to add the WP functions to my .php.
    
    I did it by adding require_once (‘../ wp-load.php’), but if I see my .php in the browser, I get a 404 error code with the appearance of my WP theme.
    
    I get lost here, I have no idea how I could see my page created in .php without the theme, being able to use the functions of WP, for me to be able to test the code that you have given me.
    
    Thank you very much for everything Misha, you have been very kind. I’m sorry I can not put into practice the code you’ve given me, I’m sorry.
    
    A hug.
    
  - Alejandro Jul 7, 2018
    
    Oh!
    
    I have discovered define('WP_USE_THEMES', false);
    
  - Misha Jul 7, 2018
    
    Sorry, at this moment I’m not 100% sure what you’re doing…
    
    Ok, you have a PHP script, you’ve placed it in your WP directory. It is OK, but if it lays directly in WP directory, not in a subfolder, here how to include WP Environment correctly:
    require_once ( dirname(__FILE__) . '/wp-load.php' );
    
    Once you included this file, you can place the code I gave you above in it too.
    
    - Alejandro Jul 9, 2018
      
      Hi Misha, thank you very much for your time. You’re very kind. “Un tipo cojonudo”. A great guy we say in Spain.
      
      I have tested your code and it works great. What I’m going to do is try to implement it in my code, to see if I’m capable.
      
      Let’s see if I can explain what I want to do. I will be putting a numbered list to see if I explain myself better.
      
      1. I work on localhost with wamp.
      2. I have a folder with photos outside of the WordPress installation directory.
      3. These photos are the ones I want to add to WordPress. Upload them to the uploads directory.
      4. I create a function that runs through the directory of the photos. Could I avoid the form submit? I think that this is the point at which I am not able to implement your code with mine. I do not know exactly how to do it. (Right now I am working on this point).
      
      Thank you very much. Thank you very much.
      A hug.
      
      - Misha Jul 11, 2018
        
        Yes, I understand you correctly.
        
        If you need help with the code, I can write it for you, just contact me.
      - Eric Apr 18, 2024
        
        I have enjoyed reading this thread and it restores a bit of faith in humanity for me. Great people!
Cracken Aug 6, 2018

You are a champion!

Melissa Aug 9, 2018

This is awesome! It is helping me to finish up a custom plugin I am developing. I have one question: how would I go about displaying the uploaded image using a shortcode?

- Misha Aug 10, 2018
  
  Hi Melissa,
  
  I need more details.
  
Abhilash Sengupta Aug 21, 2018

Please could you help me back giving the snippet for the uploading multiple files from frontend with one fixed featured image and the rest other pictures as in a gallery in WordPress.

- Misha Aug 22, 2018
  
  Hi,
  sure,
  
  If you would like to upload multiple files, you can just add multiple attribute to your input field and do not forget to add [] to the field name.
  <input type="file" name="profilepicture[]" multiple />
  After that you have to process $_FILES['profilepicture'] as an array.
  
  To attach images to a post, add its ID as a third parameter of wp_insert_attachment() function.
  
  To set an image as a featured image, use this:
  set_post_thumbnail( $post_id, $attachment_id );
  
Vimal Aug 30, 2018

You are a champion!

pawan kumar Sep 1, 2018

how to save uploaded image in custom post type post in custom field?

- Misha Sep 1, 2018
  
  Hi,
  Would you like to save the image ID or url ?
  
pawan kumar Sep 1, 2018

actually i need that uploaded image should be upload in media and custom post type post in custom field

lipe Jan 4, 2019

Perfect! But a question, how do I delete the image from the database as soon as the user sends another one?

- Misha Jan 4, 2019
  
  wp_delete_attachment() 🙃
  
Kanhaiya Aug 17, 2019

Hey buddy, thank you so much!

Wilhelm Oct 1, 2019
Hi

First of all great function I love it!

But I need to have a extra function here instead of
```
if( empty( $profilepicture ) )
	die( 'File is not selected.' );
```
I need a function to say if (empty) the $upload_id = $variable
```
if( empty( $profilepicture ) )
	$upload_id = $variable;
```
Will be using it with update_post_meta and not instert_post can you give me a code or point me in the right direction please.
- Misha Oct 8, 2019
  
  Hi Wilhelm,
  
  So, you would like to have some kind of placeholder here, right?
  
Dac Tai Feb 16, 2020

Thank you so much :)))))

Jay Jun 24, 2021

thanks a lot man

Luís Jul 31, 2021

i love you

dlysen Oct 21, 2021

I want to leave a comment because I learn from this. This code save a lot of time and efforts. Thank you so much.

Vlad Jul 27, 2022

Great stuff, as always, thank you Misha!

- Misha Jul 28, 2022
  
  You’re welcome! 🙏🏼 😌
  
Areeb Oct 27, 2022

Thank you X 1000000000000000

Pajarito Mar 17, 2023

Muchas gracias misha desde argentina

Otis Mar 19, 2023

Merci infiniment ;) !!!

Alessandro Mar 24, 2023

Hi,
I’m try upload files mp3 but I have response error:
“http_request_failed”: [“A valid URL was not provided.”]

- Misha Mar 25, 2023
  
  Is there any chance that your file is on localhost or blocked with http auth?
  
nicmare Apr 4, 2023

if i try to upload a “jpg” image, it creates the tmp file like /var/tmp/15524-muF7NB.tmp and wp_handle_sideload prints error “Sorry, you are not allowed to upload this file type.”. Whats wrong with my file input?

- Ben G Aug 23, 2023
  you probably have some kind of data trailing the image your trying to upload
  
  for example website.com/foler/your-new-image.jpg?asdf
  
  You need to trim off the ?asdf part of the URL
  
  With something like this:
```
$inputString = "example_image.jpeg some text";
$outputString = preg_replace('/\.jpg.*/', '.jpg', $inputString);
```
Jim May 31, 2023

wp_handle_sideload returns null with php 8 for some reason.

Ankish Dec 11, 2023

I think this could be also done through the WP REST API.

- Misha Dec 11, 2023
  
  Absolutely, here is how.
  
  - Eric Apr 18, 2024
    
    I think this is exactly what I am looking for. I need to upload to Media Lib via api with only a URL. Tech wizardry – love it!
    
    Thank you!
    
macwinnie Aug 14, 2024

Hey!

Thank you for that code snippet – it saved a lot of time and nerves on my end =)

But … currently, I’m running into the problem, that Subscribers seem not to be allowed to upload attachments …

As long as I’m submitting the upload as logged in administrator, all goes fine – but as soon as I change to a logged in subscriber, it just fails … adjusting `wp_insert_attachment` to use the 4th parameter for returning error objects did not make a clue … and currently I’m totally puzzled about that :(

Probably you have an idea, where I forgot to search for a solution? From my point of view, using that functions it’s in the coders responsibility who can access the form to upload media and WP should not restrict that any further, should it?

Thanks a lot!

kowshalya Sep 25, 2024

Thank you

Vdesk Hangupphp3 Exploit |top| < 1080p 2027 >

Comments — 49

Leave a Reply Cancel reply