Directory traversal

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter...

CVE-2015-9473

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter...

CVE-2015-9473: Improper Limitation of a Pathname to a Restricted Directory

The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter...

PT-2019-7432

Name of the Vulnerable Software and Affected Versions estrutura-basica theme versions through 2015-09-13 Description The issue concerns directory traversal in the estrutura-basica theme for WordPress. This is achieved via the arquivo parameter in the "scripts/download.php" endpoint. Recommendatio...

PT-2019-7073

Name of the Vulnerable Software and Affected Versions Antioch theme for WordPress versions through 2014-09-07 Description The issue allows arbitrary file downloads via the file parameter to "lib/scripts/download.php". This enables unauthorized access to files on the system. Recommendations For...

CVE-2014-10397: Improper Limitation of a Pathname to a Restricted Directory

The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...