CVE-2018-7490

HIGH NUCLEI

uWSGI < 2.0.17 - Path Traversal via --php-docroot Option

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2018-7490. PoCs published by Marios Nicolaides, qinzhu111. A Nuclei detection template is also available.

AI-analyzed exploit summary This is a detailed writeup describing a directory traversal vulnerability in uWSGI PHP Plugin before 2.0.17. The vulnerability allows remote attackers to read arbitrary files outside the web root directory using path traversal sequences when the 'php-docroot' option is used without 'php-allowed-docroot'.

Description

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

Exploits (2)

exploitdb WRITEUP VERIFIED
by Marios Nicolaides · textwebappsphp
https://www.exploit-db.com/exploits/44223

This is a detailed writeup describing a directory traversal vulnerability in uWSGI PHP Plugin before 2.0.17. The vulnerability allows remote attackers to read arbitrary files outside the web root directory using path traversal sequences when the 'php-docroot' option is used without 'php-allowed-docroot'.

Classification
Writeup 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: uWSGI PHP Plugin before 2.0.17
No auth needed
Prerequisites: uWSGI PHP Plugin configured with 'php-docroot' and without 'php-allowed-docroot'
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec SCANNER 1 stars
by qinzhu111 · poc
https://github.com/qinzhu111/uWSGI-CVE-2018-7490-POC

This script checks for the presence of CVE-2018-7490, a directory traversal vulnerability in uWSGI PHP, by attempting to access /etc/passwd via path traversal sequences. It does not exploit the vulnerability beyond detection.

Classification
Scanner 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: uWSGI PHP (versions affected by CVE-2018-7490)
No auth needed
Prerequisites: Target URL with vulnerable uWSGI PHP instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

uWSGI PHP Plugin Local File Inclusion
HIGHby madrobot

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44223/
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4142

Scores

CVSS v3 7.5
EPSS 0.9319
EPSS Percentile 99.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (4)
debian/debian_linux 8.0
debian/debian_linux 9.0
pypi/uWSGI 0 - 2.0.17PyPI
unbit/uwsgi < 2.0.17
Published Feb 26, 2018
Tracked Since Feb 18, 2026