Published: 19/03/2018 Updated: 24/08/2020

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 506

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

A Local File Inclusion vulnerability in the Site Editor plugin up to and including 1.1.1 for WordPress allows remote malicious users to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.

Vulnerable Product	Search on Vulmon	Subscribe to Product
siteeditor site editor

Product: Site Editor Wordpress Plugin - wordpressorg/plugins/site-editor/ Vendor: Site Editor Tested version: 111 CVE ID: CVE-2018-7422 ** CVE description ** A Local File Inclusion vulnerability in the Site Editor plugin through 111 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor ...

WordPress Site Editor plugin version 111 suffers from a local file inclusion vulnerability ...

Local File Inclusion in WordPress Plugin Site Editor 1.1.1

CVE-2018-7422 Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 111 DISCLAIMER: This script is made to audit the security of systems Only use this script on your own systems or on systems you have written permission to exploit

2020 合勤【榮耀資戰 – 重裝上陣】 WriteUp

2020 合勤【榮耀資戰 – 重裝上陣】 WriteUp 日誌分析 [2pts] 日誌分析-01 題目說明： Log 為誘捕系統連線資訊，請分析在此份 log 中，駭客最感興趣的前三名服務。flag為前三名服務 port 號，依序合併後的SHA1加密值(小寫)。範例：前三名服務 [80,5060,21] -> sha1('80506021') -&

Security Operation Assessment Using Snort & Pfsense Firewall By Ahmed Pinger Table Of Contents Introduction Project Implementation Plan Analysis & Design Development Testing Documentation Scope Of Work Project Flow Setting Up Topology Diagram Setup VMware Setting Up Virtual Switches Development Setup and Configure Web Server Setup an Attacker Machine Set

Site Editor WordPress Plugin <= 1.1.1 Local File Inclusion Script

CVE-2018-7422 Site Editor WordPress Plugin <= 111 Local File Inclusion Script Usage python3 CVE-2018-7422py -u <url> -f <file> or Interactive mode: python3 CVE-2018-7422py -u <url> -i Screenshot (Interactive mode)

CWE-22 CWE-829 http://seclists.org/fulldisclosure/2018/Mar/40 https://wpvulndb.com/vulnerabilities/9044 https://www.exploit-db.com/exploits/44340/https://nvd.nist.gov https://www.exploit-db.com/exploits/44340/https://github.com/JacobEbben/CVE-2018-7422

CVE-2018-7422

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect