daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2014-9119.yaml

patch-1
Ritik Chaddha 2022-08-10 13:09:57 +05:30 committed by GitHub
parent d3c0311b05
commit 1d47960a21
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cves/2015/CVE-2014-9119.yaml
View File

@ -4,16 +4,18 @@ info:
name: WordPress DB Backup <=4.5 - Local File Inclusion
author: dhiyaneshDK
severity: high
description: WordPress Plugin DB Backup 4.5 and possibly prior versions are prone to a local file inclusion vulnerability because they fail to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks.
description: |
WordPress Plugin DB Backup 4.5 and possibly prior versions are prone to a local file inclusion vulnerability because they fail to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks.
reference:
- https://wpscan.com/vulnerability/d3f1e51e-5f44-4a15-97bc-5eefc3e77536
- https://www.exploit-db.com/exploits/35378
- https://nvd.nist.gov/vuln/detail/CVE-2014-9119
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cwe-id: CWE-22
cve-id: CVE-2014-9119
tags: wordpress,wp-plugin,lfi,wp
tags: wordpress,wp-plugin,lfi,wp,backup
requests:
- method: GET