Wordpress mypixs plugin local file inclusion vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation. mypixs is one of the plugins to view and manage Picasa web albums. A local file inclusion vulnerability exists in version v0.3 of the Wordpress mypixs plugin, which can be exploited by...

CVE-2015-1000012

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

Remote file inclusion

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

CVE-2015-1000012

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

CVE-2015-1000012

CVE-2015-1000012 affects WordPress plugins: MyPixs = 0.4) or apply vendor patch. Public references include NVD, WPScan/VulnDB, and Vapidlabs advisories. If exploiting details are present, they are limited to the PoC URL shown; no additional exploit steps are described beyond the LFI concept.

PT-2016-3580

Name of the Vulnerable Software and Affected Versions mypixs version 0.3 Description A Local File Inclusion issue has been identified. Recommendations For mypixs version 0.3, update to a version that includes a fix for this issue, if available. At the moment, there is no information about a newer...

CVE-2015-1000012: Exposure of Sensitive Information to an Unauthorized Actor

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

WordPress MyPixs Plugin <= 0.3 - Unauthenticated Local File Inclusion

This plugin is prone to a local file inclusion vulnerability from downloadpage.php. Solution Update the plugin...

MyPixs <= 0.3 - Unauthenticated Local File Inclusion (LFI)

Plugin is still affected and has been closed. Typical local file inclusion vulnerability: from downloadpage.php: I've tried to get RCE but didn't have success reading from /proc/self/environ or /var/log/apache2/access.log include: Failed opening '/proc/self/environ' for inclusion...

MyPixs <= 0.3 - Unauthenticated Local File Inclusion (LFI)

Plugin is still affected and has been closed. Typical local file inclusion vulnerability: from downloadpage.php: I've tried to get RCE but didn't have success reading from /proc/self/environ or /var/log/apache2/access.log include: Failed opening '/proc/self/environ' for inclusion...