Lucene search
HistoryAug 22, 2014 - 2:55 p.m.
CVE-2014-5368
cve-2014-5368
directory traversal
file_get_contents
download.php
wp content source control
wp-source-control
wordpress
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
9.1 High
AI Score
Confidence
High
0.092 Low
EPSS
Percentile
94.7%
Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a … (dot dot) in the path parameter.
Affected configurations
Node
wp_content_source_control_projectwp_content_source_controlRange≤3.0.0wordpress
Related
wpvulndb
wpvulndb
WP Content Source Control <= 3.0.0 - Path Traversal
2014-09-17 00:00:00
patchstack
patchstack
WordPress WP Content Source Control Plugin - Directory Traversal
2014-08-19 00:00:00
openvas
openvas
prion
prion
Directory traversal
2014-08-22 14:55:00
cvelist
cvelist
CVE-2014-5368
2014-08-22 14:00:00
nessus
nessus
WP Source Control Plugin for WordPress Directory Traversal
2014-08-25 00:00:00
nuclei
nuclei
WordPress Plugin WP Content Source Control - Directory Traversal
2021-08-05 23:09:11
nvd
nvd
CVE-2014-5368
2014-08-22 14:55:09
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
9.1 High
AI Score
Confidence
High
0.092 Low
EPSS
Percentile
94.7%
Related for CVE-2014-5368