Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php
Impact
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to execute remote PHP code or include local files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.
Source excerpt · VulnCheckAttackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to execute remote PHP code or include local files.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Pedro Marcelo · Issuu Panel
Other versions: unaffected
| Version / range | Source status |
|---|---|
| 1.0 to before 1.6.6 | affected |
Original source description
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to execute remote PHP code or include local files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.
References
- Public exploit reference packetstorm.news/files/id/136398/
- Source reference cxsecurity.com/issue/WLB-2016030131
- Security advisory github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/issuu-panel-lfi.yaml
- Source reference wordpress.org/plugins/issuu-panel/
- Security advisory www.vulncheck.com/advisories/issuu-panel-wordpress-plugin-1.6.6-file-inclusion-via-ajax-docs-php