Lucene search

[email protected]CVE-2008-5752

HistoryDec 30, 2008 - 5:30 p.m.

CVE-2008-5752

2008-12-3017:30:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2008

5752

directory traversal

vulnerability

getconfig.php

page flip image gallery

wordpress

magic_quotes_gpc

remote attackers

arbitrary files

dot dot

book_id parameter

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.8%

JSON

Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

wordpresspage_flip_image_gallery_pluginRange≤0.2.2

wordpresspage_flip_image_gallery_pluginMatch0.1

wordpresspage_flip_image_gallery_pluginMatch0.1.1

wordpresspage_flip_image_gallery_pluginMatch0.1.3

wordpresspage_flip_image_gallery_pluginMatch0.1.4

wordpresspage_flip_image_gallery_pluginMatch0.1.6

wordpresspage_flip_image_gallery_pluginMatch0.2.0

wordpresspage_flip_image_gallery_pluginMatch0.2.1

AND

wordpresswordpress

CPENameOperatorVersion
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery pluginle0.2.2
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery plugineq0.1
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery plugineq0.1.1
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery plugineq0.1.3
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery plugineq0.1.4
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery plugineq0.1.6
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery plugineq0.2.0
wordpress:page_flip_image_gallery_pluginwordpress page flip image gallery plugineq0.2.1

CPE	Name	Operator	Version
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	le	0.2.2
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	eq	0.1
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	eq	0.1.1
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	eq	0.1.3
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	eq	0.1.4
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	eq	0.1.6
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	eq	0.2.0
wordpress:page_flip_image_gallery_plugin	wordpress page flip image gallery plugin	eq	0.2.1