Lucene search

K
cveMitreCVE-2015-4616
HistoryJul 08, 2015 - 4:59 p.m.

CVE-2015-4616

2015-07-0816:59:02
CWE-22
mitre
web.nvd.nist.gov
24
cve
2015
4616
directory traversal
easy2map
wordpress
vulnerability
mappinimagesave

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.009

Percentile

82.6%

Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a … (dot dot) in the map_id parameter.

Affected configurations

Nvd
Node
easy2map_projecteasy2mapRange1.2.4wordpress
VendorProductVersionCPE
easy2map_projecteasy2map*cpe:2.3:a:easy2map_project:easy2map:*:*:*:*:*:wordpress:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.009

Percentile

82.6%