Description
WordPress 插件 Google for WooCommerce 的 /scripts/print_php_information.php 文件存在信息泄露漏洞。攻击者可以通过直接访问该文件，获取服务器的 PHP 配置信息，包括敏感信息如系统路径、已加载的 PHP 扩展等。这可能导致进一步的攻击，例如利用已知的扩展漏洞或暴露的路径进行攻击。
WordPress Google for WooCommerce /wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/scripts/print_php_information.php 信息泄露漏洞（CVE-2024-10486）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-10486
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/google-listings-and-ads/google-for-woocommerce-286-information-disclosure-via-publicly-accessible-php-info-file
https://plugins.trac.wordpress.org/browser/google-listings-and-ads/tags/2.8.6/vendor/googleads/google-ads-php/scripts/print_php_information.php
https://avd.aquasec.com/nvd/2024/cve-2024-10486/
https://hackhalt.com/threat/cve-2024-10486/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10486.yaml
https://pentest-tools.com/vulnerabilities-exploits/google-for-woocommerce-286-information-disclosure-via-publicly-accessible-php-info-file_26959
https://socradar.io/labs/app/cve-radar/CVE-2024-10486
https://vulners.com/cve/CVE-2024-10486