.. / CVE-2022-25216

• LFI
• Nuclei
• Web

Exploit for DVDFab 12 Player/PlayerFab - Local File Inclusion (CVE-2022-25216)

Description:

DVDFab 12 Player/PlayerFab is susceptible to local file inclusion which allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access.

Nuclei Template

View the template here CVE-2022-25216.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-25216.yaml

References: