.. / CVE-2014-8676

• LFI
• Nuclei
• Web

Exploit for Simple Online Planning Tool <1.3.2 - Local File Inclusion (CVE-2014-8676)

Description:

SOPlanning <1.32 contain a directory traversal in the file_get_contents function via a .. (dot dot) in the fichier parameter.

Nuclei Template

View the template here CVE-2014-8676.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2014/CVE-2014-8676.yaml

References: