Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbAndreas KlöblWPVDB-ID:17591AC5-88FA-4CAE-A61A-4DCF5DC0B72A
HistoryJun 28, 2021 - 12:00 a.m.

Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF

2021-06-2800:00:00
Andreas Klöbl
wpscan.com
37

0.036 Low

EPSS

Percentile

91.7%

JSON

The theme and plugin have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF (Server Side Request Forgery) and RFI (Remote File Inclusion) vulnerabilities on the website.

PoC

https://demo.pro.radio/wp1/home-18/?qtproxycall=https://raw.githubusercontent.com/wpscanteam/wpscan/master/README.md

CPENameOperatorVersion
qt-kentharadiolt2.0.2
onair2lt3.9.9.2

Related

cve 1
cvelist 1
nvd 1
nuclei 1
wpexploit 1
prion 1
cve
cve
CVE-2021-24472
2021-08-02 11:15:10
cvelist
cvelist
CVE-2021-24472 Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
2021-08-02 10:32:13
nvd
nvd
CVE-2021-24472
2021-08-02 11:15:10
nuclei
nuclei
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery
2021-07-13 13:12:05
wpexploit
wpexploit
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
2021-06-28 00:00:00
prion
prion
Server side request forgery (ssrf)
2021-08-02 11:15:00

0.036 Low

EPSS

Percentile

91.7%

JSON
Related for WPVDB-ID:17591AC5-88FA-4CAE-A61A-4DCF5DC0B72A
cve1cvelist1nvd1nuclei1wpexploit1prion1