Wordpress mypixs plugin local file inclusion vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation. mypixs is one of the plugins to view and manage Picasa web albums. A local file inclusion vulnerability exists in version v0.3 of the Wordpress mypixs plugin, which can be exploited by...

CVE-2015-1000012

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

Remote file inclusion

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

CVE-2015-1000012

CVE-2015-1000012 affects WordPress plugins: MyPixs = 0.4) or apply vendor patch. Public references include NVD, WPScan/VulnDB, and Vapidlabs advisories. If exploiting details are present, they are limited to the PoC URL shown; no additional exploit steps are described beyond the LFI concept.

CVE-2015-1000012

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

CVE-2015-1000012: Exposure of Sensitive Information to an Unauthorized Actor

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

MyPixs <= 0.3 - Unauthenticated Local File Inclusion (LFI)

Plugin is still affected and has been closed. Typical local file inclusion vulnerability: from downloadpage.php: I've tried to get RCE but didn't have success reading from /proc/self/environ or /var/log/apache2/access.log include: Failed opening '/proc/self/environ' for inclusion...

WordPress MyPixs Plugin <= 0.3 - Unauthenticated Local File Inclusion

This plugin is prone to a local file inclusion vulnerability from downloadpage.php. Solution Update the plugin...

MyPixs <= 0.3 - Unauthenticated Local File Inclusion (LFI)

Plugin is still affected and has been closed. Typical local file inclusion vulnerability: from downloadpage.php: I've tried to get RCE but didn't have success reading from /proc/self/environ or /var/log/apache2/access.log include: Failed opening '/proc/self/environ' for inclusion...