CVE-2018-12909

HIGHNuclei

Webgrind <= 1.5 - Local File Inclusion

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2018-12909 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryHIGHWebgrind <= 1.5 - Local File InclusionCVSS 7.5

Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI

Impact

Unauthenticated attackers can read arbitrary files including sensitive configuration files, database credentials, and system files that the web server has access to.

Remediation

Upgrade Webgrind to a version higher than 1.5 or apply the necessary patches provided by the vendor.

WeaknessesCWE-22
AuthorsDhiyaneshDk
Template tagscvecve2018lfiwebgrindwebgrind_projectvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:webgrind_project:webgrind:1.5.0:*:*:*:*:*:*:*
FOFA: app="Webgrind"
FOFA: app="webgrind"
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Webgrind%20fileviewer.phtml%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20CVE-2018-12909.md https://github.com/jokkedk/webgrind/issues/112 https://nvd.nist.gov/vuln/detail/CVE-2018-12909 https://github.com/KayCHENvip/vulnerability-poc https://github.com/Miraitowa70/POC-Notes

Source: ProjectDiscovery

References

2