Lucene search
WpvulndbWPVDB-ID:FE3DA8C1-AE21-4B70-B3F5-A7D014AA3815HistoryMar 30, 2022 - 12:00 a.m.
Videos sync PDF <= 1.7.4 - Unauthenticated LFI
2022-03-3000:00:00
wpscan.com
23
videos sync pdf
unauthenticated
lfi
local file inclusion
plugin vulnerability
EPSS
0.015
Percentile
87.1%
The plugin does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues
PoC
https://example.com/wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=LFI
Related
nvd
nvd
CVE-2022-1392
2022-04-25 16:16:08
nuclei
nuclei
WordPress Videos sync PDF <=1.7.4 - Local File Inclusion
2022-05-13 03:48:08
prion
prion
Input validation
2022-04-25 16:16:00
cvelist
cvelist
CVE-2022-1392 Videos sync PDF <= 1.7.4 - Unauthenticated LFI
2022-04-25 15:51:27
cve
cve
CVE-2022-1392
2022-04-25 16:16:08
cnvd
cnvd
WordPress plugin Videos sync PDF file contains vulnerabilities
2022-04-27 00:00:00
wpexploit
wpexploit
Videos sync PDF <= 1.7.4 - Unauthenticated LFI
2022-03-30 00:00:00