Description

webadmin.php is a simple Web-based file manager. This file manager should not be installed on production systems because it doesn't employ any user authentication in the default configuration. Therefore an attacker can read and create random files in your system.

Remediation

Restrict access to this file or remove it from the system.

References

webadmin homepage

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Information Disclosure (1.2.5)

WordPress Plugin SSL Insecure Content Fixer Information Disclosure (2.0.0)

WordPress Plugin WP-Client Lite::Client Portals, File Sharing, Messaging & Invoicing Local File Inclusion (1.1.1)

WordPress Plugin Advanced Contact form 7 DB Information Disclosure (1.6.2)

WordPress Plugin WP Mobile Edition Arbitrary File Disclosure (2.2.7)

Severity

High

Classification

CWE-552 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Abuse Of Functionality Arbitrary File Creation File Inclusion Information Disclosure