CVE-2014-10396: Improper Limitation of a Pathname to a Restricted Directory

The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php...

PT-2019-7072

Name of the Vulnerable Software and Affected Versions Epic theme for WordPress versions through 2014-09-07 Description The issue allows arbitrary file downloads via the file parameter to the "includes/download.php" endpoint. This could potentially lead to unauthorized access to sensitive files...

PT-2017-6861

Name of the Vulnerable Software and Affected Versions WP e-Commerce Shop Styling plugin versions prior to 2.6 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the filename parameter to the...

CVE-2015-5469: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php...

CVE-2015-5468: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...

PT-2017-6862

Name of the Vulnerable Software and Affected Versions MDC YouTube Downloader plugin version 2.1.0 for WordPress Description The issue allows remote attackers to read arbitrary files by providing a full pathname in the file parameter to the "includes/download.php" endpoint. Recommendations For MDC...

CVE-2010-0696: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter...

CVE-2007-2507

CVE-2007-2507 describes a directory traversal vulnerability in the Treble Designs 1024 CMS 0.7. The flaw exists in includes/download.php and allows remote attackers to read arbitrary files by providing a ../ sequence in the item parameter. The issue affects Treble Designs 1024 CMS 0.7 and enables...

CVE-2007-2507: Undefined Security Weakness

Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the item parameter...