9 matches found
CVE-2014-10397
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...
CVE-2014-10397
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...
Design/Logic Flaw
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...
CVE-2014-10397
The CVE-2014-10397 entry concerns the Antioch WordPress theme (up to 2014-09-07). A vulnerability in lib/scripts/download.php allows an attacker to trigger arbitrary file downloads by manipulating the file parameter, enabling partial confidentiality impact. Root cause is improper handling of the ...
CVE-2014-10397
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...
CVE-2014-10397: Improper Limitation of a Pathname to a Restricted Directory
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...
WordPress Antioch Arbitrary File Download Vulnerability
WordPress Antioch theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Antioch Theme...
WordPress Antioch Theme - Arbitrary File Download
Antioch theme's "download.php" is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Upgrade the theme...
WordPress Theme Antioch - download.php Arbitrary File Download
WordPress Theme Antioch - download.php Arbitrary File Download source: https://www.securityfocus.com/bid/69673/info Antioch theme for Wordpress is prone to an arbitrary file-download vulnerability. An attacker can exploit this issue to download arbitrary files from the web server and obtain...