.. / CVE-2023-6505

• Info Disclosure
• Nuclei
• Web

Exploit for Prime Mover < 1.9.3 - Sensitive Data Exposure (CVE-2023-6505)

Description:

Prime Mover plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.2 via directory listing in the ‘prime-mover-export-files/1/’ folder. This makes it possible for unauthenticated attackers to extract sensitive data including site and configuration information, directories, files, and password hashes.

Nuclei Template

View the template here CVE-2023-6505.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6505.yaml

References: