CVE-2015-4616

🗓️ 08 Jul 2015 16:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

CVE-2015-4616 Directory traversal vulnerability in Easy2Map plugi

Reporter	Title	Published	Views	Family All 8
CNVD	WordPress Easy2Map plugin directory traversal vulnerability	10 Jul 201500:00	–	cnvd
Cvelist	CVE-2015-4616	8 Jul 201516:00	–	cvelist
NVD	CVE-2015-4616	8 Jul 201516:59	–	nvd
Packet Storm	WordPress easy2map 1.24 SQL Injection	3 Jul 201500:00	–	packetstorm
Prion	Directory traversal	8 Jul 201516:59	–	prion
securityvulns	Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	14 Jul 201500:00	–	securityvulns
wpexploit	Easy2Map <= 1.24 - SQL Injection	8 Jun 201500:00	–	wpexploit
WPVulnDB	Easy2Map <= 1.24 - SQL Injection	8 Jun 201500:00	–	wpvulndb

NVD

Node

easy2map_project easy2mapRange≤1.2.4wordpress

Source	Link
seclists	www.seclists.org/fulldisclosure/2015/Jul/18
securityfocus	www.securityfocus.com/archive/1/535922/100/0/threaded
plugins	www.plugins.trac.wordpress.org/changeset/1191455/easy2map
vapid	www.vapid.dhs.org/advisory.php
exploit-db	www.exploit-db.com/exploits/37534/

Parameter	Position	Path	Description	CWE
map_id	query param	includes/MapPinImageSave.php	Directory traversal vulnerability via map_id that can write files outside the intended directory.	CWE-22
mapID	request body	wp-admin/admin-ajax.php	SQL injection in Function.php due to unsanitized inputs leading to insecure database queries.	CWE-22
mapName	request body	wp-admin/admin-ajax.php	SQL injection in Function.php due to unsanitized inputs leading to insecure database queries.	CWE-22
action	request body	wp-admin/admin-ajax.php	SQL injection in Function.php due to unsanitized inputs leading to insecure database queries.	CWE-22

06 May 2026 22:30Current

7High risk

Vulners AI Score7

CVSS 25

EPSS0.1526

cve 2015 4616 directory traversal easy2map wordpress vulnerability mappinimagesave