713 matches found
PT-2015-4291
Name of the Vulnerable Software and Affected Versions Codiad version 2.4.3 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the path parameter of the download.php file in the components/filemanager directory...
CVE-2014-9581: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information...
PT-2014-8837
Name of the Vulnerable Software and Affected Versions DB Backup plugin versions 4.5 and earlier for Wordpress Description A directory traversal issue in the download.php file of the DB Backup plugin allows remote attackers to read arbitrary files by using a .. dot dot in the file parameter...
CVE-2014-9119: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
PT-2014-8632
Name of the Vulnerable Software and Affected Versions WordPress Download Manager plugin for WordPress affected versions not specified Description A directory traversal issue exists in the WordPress Download Manager plugin, allowing remote attackers to read arbitrary files. This is achieved by...
WordPress Antioch Arbitrary File Download Vulnerability
WordPress Antioch theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Antioch Theme...
WordPress Theme Antioch - 'download.php' Arbitrary File Download
source: https://www.securityfocus.com/bid/69673/info Antioch theme for Wordpress is prone to an arbitrary file-download vulnerability. An attacker can exploit this issue to download arbitrary files from the web server and obtain potentially sensitive information...
CVE-2014-5465
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
Directory traversal
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2014-5465
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2014-5465
The CVE-2014-5465 issue affects the WordPress ShortCode Plugin (Download ShortCode) version 0.2.3 and earlier, where force-download.php is vulnerable to directory traversal via a .. in the file parameter, enabling reading arbitrary local files. OpenVAS/PRION/CVE references corroborate a Local Fil...
PT-2014-6493
Name of the Vulnerable Software and Affected Versions Download Shortcode plugin versions 0.2.3 and earlier Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. This is a directory traversal vulnerability in the force-download.php file...
CVE-2014-5465: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2014-5368
Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...
Directory traversal
Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...
CVE-2014-5368
CVE-2014-5368 affects the WordPress WP Content Source Control plugin (versions 3.0.0 and earlier). A directory traversal vulnerability exists in the downloadfiles/download.php script where user-controlled input in the path parameter can be navigated with “..” to trigger read access via file_get_c...
CVE-2014-5368
Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...
PT-2014-6434
Name of the Vulnerable Software and Affected Versions WP Content Source Control plugin versions 3.0.0 and earlier Description A directory traversal issue exists in the file get contents function within the downloadfiles/download.php file of the WP Content Source Control plugin. This allows remote...
CVE-2014-5368: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...
