Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure

2023-12-1200:00:00

Dmitrii Ignatyev

175

prime mover

sensitive data exposure

directory listing

exploit

wordpress

backup

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.5%

JSON

Description The plugin does not prevent directory listing in sensitive directories containing export files.

http://127.0.0.1/wordpress/wp-content/uploads/prime-mover-export-files/1/
0) Go to packages and crate new (If there is no backup now)
1) Go to this URL manualy
2) Use Exploit

References

research.cleantalk.org/cve-2023-6505-prime-mover-poc-exploit/