Directory traversal

2017-10-1921:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.3%

JSON

The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.

CPENameOperatorVersion
job_managerle0.7.24

CPE	Name	Operator	Version
	job_manager	le	0.7.24

References

vagmour.eu/cve-2015-6668-cv-filename-disclosure-on-job-manager-wordpress-plugin/

wpvulndb.com/vulnerabilities/8167