CVE-2022-1392

🗓️ 25 Apr 2022 15:51:27Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 91 Views🌐 WEB

The Videos sync PDF WordPress plugin through 1.7.4 is prone to Local File Inclusion

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-1392	25 Apr 202216:16	–	attackerkb
Circl	CVE-2022-1392	25 Apr 202220:36	–	circl
CNNVD	WordPress plugin Videos sync PDF路径遍历漏洞	25 Apr 202200:00	–	cnnvd
CNVD	WordPress plugin Videos sync PDF file contains vulnerabilities	27 Apr 202200:00	–	cnvd
Cvelist	CVE-2022-1392 Videos sync PDF <= 1.7.4 - Unauthenticated LFI	25 Apr 202215:51	–	cvelist
Nuclei	WordPress Videos sync PDF <=1.7.4 - Local File Inclusion	6 Jun 202603:01	–	nuclei
NVD	CVE-2022-1392	25 Apr 202216:16	–	nvd
Prion	Input validation	25 Apr 202216:16	–	prion
RedhatCVE	CVE-2022-1392	22 May 202522:16	–	redhatcve
wpexploit	Videos sync PDF <= 1.7.4 - Unauthenticated LFI	30 Mar 202200:00	–	wpexploit

NVD

Vulners

Node

commoninja videos_sync_pdfRange≤1.7.4wordpress

[
  {
    "product": "Videos sync PDF",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.7.4",
        "status": "affected",
        "version": "1.7.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/fe3da8c1-ae21-4b70-b3f5-a7d014aa3815
packetstormsecurity	www.packetstormsecurity.com/files/166534/

Parameter	Position	Path	Description	CWE
p	query param	/wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php	Local File Inclusion via unvalidated p parameter used in include statement	CWE-22

21 Nov 2024 06:40Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.50891

CWE-22