.. / CVE-2023-6065

Exploit for Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure (CVE-2023-6065)

Description:

The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn’t restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site’s code

Nuclei Template

View the template here CVE-2023-6065.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6065.yaml
Copy

References:

https://wordpress.org/plugins/quttera-web-malware-scanner/
https://nvd.nist.gov/vuln/detail/CVE-2023-6065
https://wpscan.com/vulnerability/64f2557f-c5e4-4779-9e28-911dfaf2dda5