CVE-2007-6369

Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the 1 size or 2 path parameter...

CVE-2007-6369

The CVE-2007-6369 entry concerns the WordPress PictPress plugin (versions up to 0.91). The vulnerability is a directory traversal in resize.php, where the attack succeeds by providing a dot-dot in the size or path parameter, allowing an attacker to read arbitrary server files. Impacts are file di...