Technical Tracks
summary
Describes an unauthenticated information‑disclosure flaw in the Eventon WordPress plugin (versions before 2.12, tracked as Eventon CVE-2023-2796, CVSS ~5.3) that allows enumeration of numeric event IDs to read public, private and password‑protected events. Discovery combined Google dorking, PublicWWW and a technology index to find targets, then automated brute‑force of event IDs using Burp Intruder to detect response‑size differences. The writeup contrasts disclosure choices: a Wordfence submission kept the proof‑of‑concept private while WPScan published it, and the exploit ended up on Exploit‑DB; a bounty program ultimately paid after many reports.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:02Key terms and concepts
- 2:49EventON plugin vulnerability
- 4:34Mitigation process and CVE
- 6:45Finding vulnerable targets
- 8:10Automation and proof of concept
- 9:14Results and success examples
related talks
01h 01mHow hacking works - Web edition
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
30mHow to hack a web app?
44mI've Been Hacked, Now What
47mEsoteric Web Application Vulnerabilities
43mHow The Hack?
47mExploring the New World : Remote Exploitation of SQLite and Curl
27mExploited CVEs of 2024: Lessons for Vendors and Defenders