CVE-2014-8799
NUCLEIdukapress < 2.5.3 - Path Traversal via src Parameter in dp_image.php
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-8799.
PoCs published by Kacper Szurek, including Metasploit module auxiliary/scanner/http/wp_dukapress_file_read.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a path traversal vulnerability in DukaPress 2.5.2, allowing unauthorized access to sensitive files like wp-config.php via a crafted request to dp_image.php.
Description
Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter to lib/dp_image.php.
Exploits (2)
This exploit demonstrates a path traversal vulnerability in DukaPress 2.5.2, allowing unauthorized access to sensitive files like wp-config.php via a crafted request to dp_image.php.
This Metasploit module exploits a directory traversal vulnerability in the WordPress DukaPress plugin (version <= 2.5.3) to read arbitrary files with web server privileges. It sends a crafted HTTP GET request to the vulnerable endpoint with a traversal payload to access files outside the intended directory.