CVE-2015-5065

2015-06-2414:59:07

CWE-22

[email protected]

web.nvd.nist.gov

cve-2015-5065

absolute path traversal

proxy.php

google currency lookup

paypal currency converter

woocommerce plugin

remote attackers

arbitrary files

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter.

Affected configurations

NVD

Node

intelligent-itpaypal_currency_converter_basic_for_woocommerceRange<1.4wordpress

CPENameOperatorVersion
intelligent-it:paypal_currency_converter_basic_for_woocommerceintelligent-it paypal currency converter basic for woocommercelt1.4