Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-9461
cve-2014-9461
directory traversal
cart66 lite plugin
wordpress
remote authenticated users
arbitrary files
nvd
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.6%
Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to read arbitrary files via a … (dot dot) in the member_download action to wp-admin/admin-ajax.php.
Affected configurations
Node
reality66cart66_liteRange≤1.5.3wordpress
| CPE | Name | Operator | Version |
|---|---|---|---|
| reality66:cart66_lite | reality66 cart66 lite | le | 1.5.3 |
Related
wpvulndb
wpvulndb
Cart66 Pro <= 1.5.3 - Authenticated Arbitrary File Disclosure
2015-01-01 00:00:00
prion
prion
Directory traversal
2015-01-02 22:59:00
patchstack
patchstack
WordPress Cart66 Lite Plugin <= 1.5.3 - Directory Traversal
2015-01-02 00:00:00
nvd
nvd
CVE-2014-9461
2015-01-02 22:59:01
cvelist
cvelist
CVE-2014-9461
2022-10-03 16:20:41
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.6%
Related for CVE-2014-9461