CVE-2020-28976

creationtimestamp| type| source ---|---|--- 2024-11-14 06:07:24+00:00| seen| MISP/15b0eb04-a9b0-47d6-9d32-cdc72a671fa1...

Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)

Exploit Title: Wordpress Plugin Canto 1.3.0 - Blind SSRF Unauthenticated Date: 03/12/2020 Exploit Author: Pankaj Verma p4nk4j Vendor Homepage: https://www.canto.com/integrations/wordpress/ Software Link: https://github.com/CantoDAM/Canto-Wordpress-Plugin Version: 1.3.0 Tested on: Ubuntu 18.04 CVE...

WordPress Canto 1.3.0 Server-Side Request Forgery

Exploit Title: Wordpress Plugin Canto 1.3.0 - Blind SSRF Unauthenticated Date: 03/12/2020 Exploit Author: Pankaj Verma p4nk4j Vendor Homepage: https://www.canto.com/integrations/wordpress/ Software Link: https://github.com/CantoDAM/Canto-Wordpress-Plugin Version: 1.3.0 Tested on: Ubuntu 18.04 CVE...

CVE-2020-28976

The CVE-2020-28976 entry relates to WordPress Canto plugin 1.3.0, which is vulnerable to blind Server-Side Request Forgery. The flaw allows an unauthenticated attacker to cause requests to arbitrary internal/external hosts via the subdomain parameter in endpoints such as includes/lib/detail.php?s...