Lucene search
Andreas KlöblWPEX-ID:17591AC5-88FA-4CAE-A61A-4DCF5DC0B72AHistoryJun 28, 2021 - 12:00 a.m.
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
2021-06-2800:00:00
Andreas Klöbl
216
0.036 Low
EPSS
Percentile
91.7%
The theme and plugin have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF (Server Side Request Forgery) and RFI (Remote File Inclusion) vulnerabilities on the website.
https://demo.pro.radio/wp1/home-18/?qtproxycall=https://raw.githubusercontent.com/wpscanteam/wpscan/master/README.mdRelated
wpvulndb
wpvulndb
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
2021-06-28 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2021-24472
2021-08-02 11:15:10
cve
cve
CVE-2021-24472
2021-08-02 11:15:10
nuclei
nuclei
prion
prion
Server side request forgery (ssrf)
2021-08-02 11:15:00