Exploit for Path Traversal in Ninjaforms Ninja_Forms_File_Uploads

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension...

CVE-2019-10869: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress when the Uploads add-on is activated. This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php aka upload/submit page name and...

PT-2019-12065

Name of the Vulnerable Software and Affected Versions Ninja Forms plugin versions prior to 3.0.23 Description The issue allows an attacker to traverse the file system and access files, as well as execute code. This is achieved through the includes/fields/upload.php page, specifically via the name...