Lucene search
WpvulndbWPVDB-ID:852C257C-929A-4E4E-B85E-064F8DADD994HistoryAug 17, 2022 - 12:00 a.m.
All-in-One Video Gallery 2.5.8 - 2.6.0 - Unauthenticated Arbitrary File Download & SSRF
2022-08-1700:00:00
wpscan.com
13
0.032 Low
EPSS
Percentile
91.3%
The plugin does not validate the dl parameter which could allow unauthenticated users to download arbitrary files from the server, as well as perform SSRF attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| all-in-one-video-gallery | lt | 2.6.1 |
Related
cvelist
cvelist
CVE-2022-2633
2022-09-06 17:18:59
nvd
nvd
CVE-2022-2633
2022-09-06 18:15:14
cve
cve
CVE-2022-2633
2022-09-06 18:15:14
nuclei
nuclei
All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery
2022-09-28 17:20:46
patchstack
patchstack
prion
prion
Server side request forgery (ssrf)
2022-09-06 18:15:00