CVE-2015-1000012

published 2016-10-06

CVE-2015-1000012: Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin

Priority P3 56 high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

EXPLOIT

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin

Affected

1 ranges

Vendor	Product	Version range	Fixed in
mypixs_project	mypixs	—	—

Detection & IOCs extracted from sources · hover to see the quote

url {{BaseURL}}/wp-content/plugins/mypixs/mypixs/downloadpage.php?url=/etc/passwd↗

path /wp-content/plugins/mypixs/mypixs/downloadpage.php↗

• → HTTP GET request to downloadpage.php with a `url` parameter pointing to /etc/passwd is the exploit vector for this LFI vulnerability. ↗
• → A successful exploitation returns HTTP 200 with the body containing the Unix passwd file pattern `root:.*:0:0:`. ↗
• → Use the Google dork `inurl:"/wp-content/plugins/mypixs"` to identify potentially vulnerable WordPress installations. ↗

• · Vulnerability affects mypixs plugin version 0.3 specifically; version 0.4 or later (or the vendor patch) remediates the issue. ↗
• · The vulnerable CPE is scoped strictly to the WordPress framework: cpe:2.3:a:mypixs_project:mypixs:0.3:*:*:*:*:wordpress:*:* ↗

CVSS provenance

nvd v3.0 7.5 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200