Server side request forgery (ssrf)

The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...

PT-2020-15635

Name of the Vulnerable Software and Affected Versions Canto plugin version 1.3.0 for WordPress Description The issue allows for Server-Side Request Forgery SSRF via the "includes/lib/download.php" endpoint with the subdomain parameter. Recommendations For Canto plugin version 1.3.0, consider...

CVE-2020-24063: Server-Side Request Forgery (SSRF)

The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...

Path traversal

Absolute path traversal vulnerability in lib/download.php in the IBS Mappro plugin before 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter...

CVE-2015-5472

CVE-2015-5472 affects the WordPress IBS Mappro plugin (prior to version 1.0). A flaw in lib/download.php allows an attacker to perform absolute path traversal by supplying a full pathname in the file parameter, enabling reading of arbitrary files on the server. The vulnerability is confirmed acro...

CVE-2015-5472

Absolute path traversal vulnerability in lib/download.php in the IBS Mappro plugin before 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter...

PT-2015-6931

Name of the Vulnerable Software and Affected Versions IBS Mappro plugin versions prior to 1.0 Description The issue allows remote attackers to read arbitrary files via a full pathname in the file parameter in the lib/download.php file. Recommendations For IBS Mappro plugin versions prior to 1.0,...

CVE-2015-5472: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in lib/download.php in the IBS Mappro plugin before 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter...

WordPress IBS Mappro Plugin <= 0.9 - Absolute Path Traversal

This vulnerability is in lib/download.php. It allows an attacker to read arbitrary files via a full pathname in the "file" parameter. Solution Update the plugin...

CVE-2008-0797: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter...