WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.4%
exploitation probability
0.4%top 69% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the controller parameter in tblight.php. Attackers can supply path traversal sequences through the controller GET parameter to include arbitrary files outside the intended controllers directory.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
cab-fare-calculator · cab-fare-calculatorpublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/50843unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.