Lucene search
PRIOn knowledge basePRION:CVE-2019-11591HistoryApr 29, 2019 - 2:29 p.m.
Directory traversal
2019-04-2914:29:00
PRIOn knowledge base
www.prio-n.com
4
The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[‘action’] value and the $_GET[‘action’] value, and the latter is unsanitized.
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact_form | lt | 1.13.5 |
Related
cve
cve
CVE-2019-11591
2019-04-29 14:29:00
cvelist
cvelist
CVE-2019-11591
2019-04-29 13:46:46
nvd
nvd
CVE-2019-11591
2019-04-29 14:29:00
openvas
openvas
WordPress Contact Form Maker Plugin < 1.13.5 CSRF Vulnerability
2019-05-08 00:00:00
wpvulndb
wpvulndb
Contact Form by WD <= 1.13.4 - Cross-Site Request Forgery to LFI
2019-04-05 00:00:00