2 matches found
CVE-2014-8799
Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...
6.9CVSS0.68439EPSS
SaveExploits6References5
CVE-2014-8799: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php...
5CVSS8.3AI score0.68439EPSS
SaveExploits6References2
20