PT-2021-23916

Name of the Vulnerable Software and Affected Versions: tripexpress version 1.1 Description: The issue concerns a path manipulation vulnerability in the file system/helpers/dompdf/load font.php. The src variable, which comes from $ SERVER"argv", is involved in this vulnerability. Recommendations:...

CVE-2015-7683

Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitrary files via a full pathname in the url parameter to AjaxProxy.php...

CVE-2015-7683

Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitrary files via a full pathname in the url parameter to AjaxProxy.php...

CVE-2015-7683

CVE-2015-7683 concerns the Font WordPress plugin (version 7.5) with an absolute path traversal vulnerability. The flaw arises from an unsanitized POST parameter named url being passed to file_get_contents via AjaxProxy.php, allowing authenticated WordPress admins to read arbitrary files (e.g., /e...

CVE-2015-7683: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitrary files via a full pathname in the url parameter to AjaxProxy.php...

PT-2015-7577

Name of the Vulnerable Software and Affected Versions WordPress Font plugin versions prior to 7.5.1 Description The issue allows remote administrators to read arbitrary files due to an absolute path traversal vulnerability in the Font.php file of the Font plugin for WordPress. This can be achieve...