WordPress ABCApp Creator 插件 <= 1.1.2 - 路径遍历漏洞 (Local File Inclusion vulnerability)

该路径遍历漏洞允许攻击者通过构造恶意的文件路径，访问服务器上的任意文件。攻击者可以利用此漏洞读取配置文件、源代码或其他敏感数据。更严重的情况下，攻击者可能能够包含恶意 PHP 文件，从而执行任意代码，完全控制受影响的系统。由于该漏洞允许本地文件包含，攻击者需要具备对服务器的访问权限才能利用此漏洞。如果攻击者能够上传文件，则可能利用此漏洞执行远程代码。

Websites utilizing ABCApp Creator, particularly those running older versions (≤1.1.2), are at risk. Shared hosting environments are especially vulnerable as they often have limited control over server configurations and file permissions. Sites with misconfigured file access controls or inadequate WAF protection are also at increased risk.

• wordpress / composer / npm:

grep -r '../' /var/www/html/wp-content/plugins/abcapp-creator/*

• generic web:

curl -I 'http://your-website.com/index.php?page=../../../../etc/passwd'

• wordpress / composer / npm:

wp plugin list --status=inactive | grep abcapp-creator

• wordpress / composer / npm:

find /var/www/html/wp-content/plugins/abcapp-creator/ -name '*.php' -print0 | xargs -0 grep -i 'include('

1. 2024-10-05Disclosure

   disclosure

1. 已保留2024-08-18
2. 发布日期2024-10-05
3. 修改日期2024-10-07
4. EPSS 更新日期2026-04-02

缓解此漏洞的首要措施是立即升级到 ABCApp Creator 1.1.3 或更高版本。如果无法立即升级，可以考虑以下临时缓解措施：限制对 ABCApp Creator 目录的访问权限，确保只有授权用户才能访问。实施严格的文件上传验证，防止攻击者上传恶意文件。配置 Web 服务器以禁用 PHP 的 allowurlinclude 指令，从而防止远程文件包含。监控服务器日志，查找可疑的文件访问尝试。