Lucene search
PRIOn knowledge basePRION:CVE-2019-11557HistoryApr 26, 2019 - 10:29 p.m.
Directory traversal
2019-04-2622:29:00
PRIOn knowledge base
www.prio-n.com
4
The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[‘action’] value and the $_GET[‘action’] value, and the latter is unsanitized.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_form_builder | lt | 1.0.69 |
Related
cve
cve
CVE-2019-11557
2019-04-26 22:29:00
openvas
openvas
WordPress Contact Form Builder Plugin < 1.0.69 CSRF Vulnerability
2019-04-29 00:00:00
cvelist
cvelist
CVE-2019-11557
2019-04-26 21:42:23
nvd
nvd
CVE-2019-11557
2019-04-26 22:29:00
wpvulndb
wpvulndb
Contact Form Builder <= 1.0.68 - CSRF to LFI
2019-04-23 00:00:00