CVE-2015-9473

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter...

CVE-2015-9473

CVE-2015-9473 concerns the WordPress estrutura-basica theme (up to 2015-09-13) with a directory traversal flaw in the scripts/download.php arquivo parameter. The root cause is improper handling of file paths, enabling retrieval of local files via this parameter. Public references in the provided ...