Description
WordPress的Canto插件存在未经身份验证的远程文件包含漏洞（CVE-2023-3452）
WordPress的Canto插件存在未经身份验证的远程文件包含漏洞（CVE-2023-3452）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-3452
https://github.com/leoanggal1/CVE-2023-3452-PoC
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/canto/canto-304-unauthenticated-remote-file-inclusion
https://www.exploit-db.com/exploits/51826
https://www.sentinelone.com/vulnerability-database/cve-2023-3452/
https://www.cve.org/CVERecord?id=CVE-2023-3452
https://wpscan.com/vulnerability/9e2817c7-d4aa-4ed9-a3d7-18f3117ed810/
https://plugins.trac.wordpress.org/browser/canto/trunk/includes/lib/tree.php?rev=2841358
https://medium.com/@humayun.noor123/on-premise-01-exploiting-cve-2023-3452-in-the-canto-wordpress-plugin-overview-800b12bc47af
https://avd.aliyun.com/detail?id=AVD-2023-3452