.. / CVE-2015-1000010

• LFI
• Nuclei
• Web

Exploit for WordPress Simple Image Manipulator < 1.0 - Local File Inclusion (CVE-2015-1000010)

Description:

WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location.

Nuclei Template

View the template here CVE-2015-1000010.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2015/CVE-2015-1000010.yaml

References: