CVE-2021-38360

The CVE-2021-38360 entry concerns the WordPress plugin wp-publications (versions

CVE-2021-38360

The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the QFILE parameter found in the /bibtexbrowser.php file which allows attackers to include local zip files and achieve remote code execution, in versions up to and including 0.0...

CVE-2021-38360: Improper Limitation of a Pathname to a Restricted Directory

The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the QFILE parameter found in the /bibtexbrowser.php file which allows attackers to include local zip files and achieve remote code execution, in versions up to and including 0.0...

PT-2021-22081

Name of the Vulnerable Software and Affected Versions wp-publications versions up to and including 0.0 Description The issue allows for restrictive local file inclusion via the Q FILE parameter in the /bibtexbrowser.php file, enabling attackers to include local zip files and achieve remote code...

wp-publications - Local File Inclusion

The plugin is vulnerable to restrictive local file inclusion via the QFILE parameter found in the /bibtexbrowser.php file which allows attackers to include local zip files and achieve remote code execution...