CVE-2020-29047

CRITICALNuclei

thimpress wp_hotel_booking Deserialization of Untrusted Data

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2020-29047 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 17, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

wp_hotel_booking

Browse thimpress / wp_hotel_booking
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALWP Hotel Booking < 1.10.4 - PHP Object InjectionCVSS 9.8

The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.

Impact

Unauthenticated attackers can exploit PHP object injection to execute arbitrary code, leading to complete server compromise.

Remediation

Upgrade to WP Hotel Booking version 1.10.3 or later.

WeaknessesCWE-502
AuthorsDhiyaneshDk
Template tagscvecve2020wordpresswp-pluginwpwp-hotel-bookingrcethimpressvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:thimpress:wp_hotel_booking:*:*:*:*:*:wordpress:*:*
FOFA: body="wp-content/plugins/wp-hotel-booking"
https://wordpress.org/plugins/wp-hotel-booking/#developers https://github.com/20142995/nuclei-templates https://nvd.nist.gov/vuln/detail/CVE-2020-29047

Source: ProjectDiscovery

References

3