vendor:
WP Plugin Lytebox
by:
TurkGuvenligi
9,3
CVSS
HIGH
Local File Include and Remote Code Execution
98
CWE
Product Name: WP Plugin Lytebox
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
WP Plugin Lytebox Local File Include and Remote Code Execution
WP Plugin Lytebox is vulnerable to Local File Include and Remote Code Execution. An attacker can exploit this vulnerability by sending a crafted HTTP request to the vulnerable server. This will allow the attacker to read sensitive files from the server and execute arbitrary code on the server.
Mitigation:
Update the WP Plugin Lytebox to the latest version to mitigate this vulnerability.
