daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2018/CVE-2018-20985.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-05-13 13:24:38 -04:00
parent 0ee38b7099
commit 0cb1439b21
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cves/2018/CVE-2018-20985.yaml
View File

@ -1,11 +1,10 @@
id: CVE-2018-20985
info:
name: WordPress Payeezy Pay 2.97 - Local File Inclusion
name: WordPress Payeezy Pay <=2.97 - Local File Inclusion
author: daffainfo
severity: critical
description: WordPress Plugin WP Payeezy Pay is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive
information that could aid in further attacks. WordPress Plugin WP Payeezy Pay version 2.97 is vulnerable; prior versions are also affected.
description: WordPress Plugin WP Payeezy Pay is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Payeezy Pay version 2.97 is vulnerable; prior versions are also affected.
reference:
- https://www.pluginvulnerabilities.com/2018/12/06/our-improved-proactive-monitoring-has-now-caught-a-local-file-inclusion-lfi-vulnerability-as-well/
- https://wordpress.org/plugins/wp-payeezy-pay/#developers
@ -37,4 +36,5 @@ requests:
status:
- 200
# Enhanced by mp on 2022/05/13