EUVD-2018-18945

Malware in sbrugna...

Design/Logic Flaw

inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is not protected and...

CVE-2018-7204

inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is not protected and...

CVE-2018-7204

inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is not protected and...

CVE-2018-7204

The CVE-2018-7204 issue affects the Giribaz File Manager WordPress plugin (inc/logger.php) prior to version 5.0.2. The plugin logs activity to /wp-content/uploads/file-manager/log.txt, and when a user edits wp-config.php via the plugin, the contents are written to log.txt without protection. Thes...

CVE-2018-7204: Insertion of Sensitive Information into Log File

inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is not protected and...

PT-2018-17946

Name of the Vulnerable Software and Affected Versions Giribaz File Manager plugin versions prior to 5.0.2 Description The issue allows sensitive information to be logged in an unprotected file. When a user edits the wp-config.php file using the plugin, its contents, including database credentials...