CVE-2015-9406

Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. dot dot in the files parameter to css/css.php...

VulnCheck KEV: CVE-2015-9406

Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. dot dot in the files parameter to css/css.php...

CVE-2015-9406

The mTheme-Unus theme for WordPress (versions prior to 2.3 ) is vulnerable to a directory traversal flaw. An attacker can exploit the files parameter in css/css.php by using .. (dot dot) sequences to read arbitrary files on the server. This could lead to the theft of sensitive information, such a...