Lucene search
Viktor MarkopoulosWPVDB-ID:51B4752A-7922-444D-A022-F1C7159B5D84HistoryJun 28, 2022 - 12:00 a.m.
SP Project & Document Manager < 4.58 - Sensitive File Disclosure
2022-06-2800:00:00
Viktor Markopoulos
wpscan.com
18
sensitive files access
user files storage
vulnerable path
file upload
bad actors
poc
software
EPSS
0.001
Percentile
32.8%
The plugin uses an easily guessable path to store user files, bad actors could use that to access other users’ sensitive files.
PoC
1. Upload a file using the plugin. 2. On another browser, access the newly uploaded file via: https://vulnerable-site.tld/wp-content/uploads/sp-client-document-manager/[user’s uid]/file.format
Related
patchstack
patchstack
prion
prion
Path traversal
2022-07-25 13:15:00
wpexploit
wpexploit
SP Project & Document Manager < 4.58 - Sensitive File Disclosure
2022-06-28 00:00:00
nvd
nvd
CVE-2022-1551
2022-07-25 13:15:08
cvelist
cvelist
cve
cve
CVE-2022-1551
2022-07-25 13:15:08