WordPress DukaPress Plugin <= 2.5.9 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress DukaPress Plugin File Read Vulnerability

This module exploits a directory traversal vulnerability in WordPress Plugin "DukaPress" version 'WordPress DukaPress Plugin File Read Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability in WordPress Plugin "DukaPress" version 'EDB', '35346', 'CVE',...

WordPress DukaPress 'src' Parameter Directory Traversal Vulnerability

WordPress DukaPress is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-8799

Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...

Directory traversal

Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...

CVE-2014-8799

WordPress DukaPress plugin vulnerability CVE-2014-8799: in versions before 2.5.4, the dp_img_resize function in php/dp-functions.php (triggered via lib/dp_image.php) allows directory traversal by supplying a .. in the src parameter, enabling reading arbitrary files. Affected: DukaPress

CVE-2014-8799

Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...

DukaPress <= 2.5.3 - Unauthenticated Path Traversal

The DukaPress WordPress plugin was affected by an Unauthenticated Path Traversal security vulnerability...

WordPress Plugin DukaPress 2.5.2 - Directory Traversal

Exploit Title: DukaPress 2.5.2 Path Traversal Date: 27-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/dukapress.2.5.2.zip Category: webapps CVE: CVE-2014-8799 1. Description dpimgresize returns $REQUEST'src' if $REQUEST'w' a...

WordPress Plugin DukaPress 2.5.2 - Directory Traversal

WordPress Plugin DukaPress 2.5.2 - Directory Traversal Exploit Title: DukaPress 2.5.2 Path Traversal Date: 27-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/dukapress.2.5.2.zip Category: webapps CVE: CVE-2014-8799 1...

DukaPress 2.5.2 Path Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: DukaPress 2.5.2 Path Traversal Date: 27-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/dukapress.2.5.2.zip Category: webapps CVE: CVE-2014-8799 1...

WordPress DukaPress Plugin <=2.5.3 - Directory Traversal

This vulnerability is in the "dpimgresize" function in php/dp-functions.php. It allows the attackers to read arbitrary files in the "src" parameter to lib/dpimage.php. Solution Update the plugin...