CVE-2022-50954

WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion

CVSS 6.9 MEDIUMEPSS 0.4%CWE-98

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the controller parameter in tblight.php. Attackers can supply path traversal sequences through the controller GET parameter to include arbitrary files outside the intended controllers directory.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Productos afectados

cab-fare-calculator · cab-fare-calculator

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/50843no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://wordpress.org/plugins/cab-fare-calculator/https://www.exploit-db.com/exploits/50843 https://www.vulncheck.com/advisories/wordpress-plugin-cab-fare-calculator-local-file-inclusion