cve/2023/CVE-2023-6821.md

18 lines
782 B
Markdown
Raw Permalink Normal View History

2024-05-28 08:49:17 +00:00
### [CVE-2023-6821](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6821)
![](https://img.shields.io/static/v1?label=Product&message=Error%20Log%20Viewer%20by%20BestWebSoft&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%201.1.3%20&color=brighgreen)
2024-08-30 20:52:42 +00:00
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-548%20Exposure%20of%20Information%20Through%20Directory%20Listing&color=brighgreen)
2024-05-28 08:49:17 +00:00
### Description
2024-08-30 20:52:42 +00:00
The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs without authorization
2024-05-28 08:49:17 +00:00
### POC
#### Reference
- https://wpscan.com/vulnerability/6b1a998d-c97c-4305-b12a-69e29408ebd9/
#### Github
- https://github.com/NaInSec/CVE-LIST