.. / CVE-2022-1119

• LFI
• Nuclei
• Web

Exploit for WordPress Simple File List <3.2.8 - Local File Inclusion (CVE-2022-1119)

Description:

WordPress Simple File List before 3.2.8 is vulnerable to local file inclusion via the eeFile parameter in the ~/includes/ee-downloader.php due to missing controls which make it possible for unauthenticated attackers retrieve arbitrary files.

Nuclei Template

View the template here CVE-2022-1119.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1119.yaml

References: