CVE-2022-50953
MEDIUMWordPress Plugin admin-word-count-column 2.2 Local File Read
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2022-50953. PoCs published by Hassan Khan Yusufzai.
AI-analyzed exploit summary The exploit demonstrates a local file read vulnerability in the WordPress plugin 'admin-word-count-column' version 2.2. The vulnerable code in 'download-csv.php' uses user-controlled input from the 'path' parameter without proper sanitization, allowing directory traversal via null byte injection to read arbitrary files on the server.
Description
WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path parameter. Attackers can send GET requests to download-csv.php with a crafted path parameter containing directory traversal sequences and null bytes to bypass file restrictions and read sensitive files like system configuration.
Exploits (1)
The exploit demonstrates a local file read vulnerability in the WordPress plugin 'admin-word-count-column' version 2.2. The vulnerable code in 'download-csv.php' uses user-controlled input from the 'path' parameter without proper sanitization, allowing directory traversal via null byte injection to read arbitrary files on the server.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N