.. / CVE-2014-9119

• LFI
• Nuclei
• Web

Exploit for WordPress DB Backup <=4.5 - Local File Inclusion (CVE-2014-9119)

Description:

WordPress Plugin DB Backup 4.5 and possibly prior versions are prone to a local file inclusion vulnerability because they fail to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks.

Nuclei Template

View the template here CVE-2014-9119.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2014/CVE-2014-9119.yaml

References: