DukaPress <= 2.5.9 - Unauthenticated Blind SQL Injection

The code in dukapress/download.php does not sanitize user input from $GET'id' before passing it to query allowing SQL to be injected. The user is not required to be logged into WordPress in order to exploit this vulnerability...

WordPress DukaPress Plugin File Read Vulnerability

This module exploits a directory traversal vulnerability in WordPress Plugin "DukaPress" version 'WordPress DukaPress Plugin File Read Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability in WordPress Plugin "DukaPress" version 'EDB', '35346', 'CVE',...

WordPress DukaPress 'src' Parameter Directory Traversal Vulnerability

WordPress DukaPress is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-8799

Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...

Directory traversal

Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...

CVE-2014-8799

WordPress DukaPress plugin vulnerability CVE-2014-8799: in versions before 2.5.4, the dp_img_resize function in php/dp-functions.php (triggered via lib/dp_image.php) allows directory traversal by supplying a .. in the src parameter, enabling reading arbitrary files. Affected: DukaPress

CVE-2014-8799

Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...

DukaPress <= 2.5.3 - Unauthenticated Path Traversal

The DukaPress WordPress plugin was affected by an Unauthenticated Path Traversal security vulnerability...

WordPress Plugin DukaPress 2.5.2 - Directory Traversal

Exploit Title: DukaPress 2.5.2 Path Traversal Date: 27-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/dukapress.2.5.2.zip Category: webapps CVE: CVE-2014-8799 1. Description dpimgresize returns $REQUEST'src' if $REQUEST'w' a...

WordPress Plugin DukaPress 2.5.2 - Directory Traversal

WordPress Plugin DukaPress 2.5.2 - Directory Traversal Exploit Title: DukaPress 2.5.2 Path Traversal Date: 27-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/dukapress.2.5.2.zip Category: webapps CVE: CVE-2014-8799 1...

DukaPress 2.5.2 Path Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: DukaPress 2.5.2 Path Traversal Date: 27-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/dukapress.2.5.2.zip Category: webapps CVE: CVE-2014-8799 1...

WordPress DukaPress Plugin <=2.5.3 - Directory Traversal

This vulnerability is in the "dpimgresize" function in php/dp-functions.php. It allows the attackers to read arbitrary files in the "src" parameter to lib/dpimage.php. Solution Update the plugin...