EUVD-2015-4722

Malware in sbrugna...

Path traversal

Absolute path traversal vulnerability in mysqldumpdownload.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter...

WordPress wp-instance-rename 'mysqldump_download.php' plugin arbitrary file download vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The WordPress wp-instance-rename 'mysqldumpdownload.php' plugin has an arbitrary file download vulnerability due to the program failing to adequately filter...