Lucene search

[email protected]CVE-2015-5482

HistoryAug 18, 2015 - 5:59 p.m.

CVE-2015-5482

2015-08-1817:59:17

CWE-22

[email protected]

web.nvd.nist.gov

cve-2015-5482

directory traversal

gd bbpress attachments

wordpress

remote code execution

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.9%

JSON

Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a … (dot dot) in the tab parameter in the gdbbpress_attachments page to wp-admin/edit.php.

Affected configurations

NVD

Node

dev4pressgd_bbpress_attachmentsRange≤2.2wordpress

CPENameOperatorVersion
dev4press:gd_bbpress_attachmentsdev4press gd bbpress attachmentsle2.2

CPE	Name	Operator	Version
dev4press:gd_bbpress_attachments	dev4press gd bbpress attachments	le	2.2

References

packetstormsecurity.com/files/132656/wpgdbbpress-lfi.txt

security.dxw.com/advisories/local-file-include-vulnerability-in-gd-bbpress-attachments-allows-attackers-to-include-arbitrary-php-files/

wordpress.org/plugins/gd-bbpress-attachments/changelog/

wpvulndb.com/vulnerabilities/8087

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.9%

JSON

Related for CVE-2015-5482

prion1 cvelist1 wpvulndb1 nvd1 patchstack1