WordPress Content Source Control Plugin Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WP Content Source Control <= 3.0.0 - Path Traversal

The WP Source Control WordPress plugin was affected by a Path Traversal security vulnerability...

CVE-2014-5368

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

CVE-2014-5368

CVE-2014-5368 affects the WordPress WP Content Source Control plugin (versions 3.0.0 and earlier). A directory traversal vulnerability exists in the downloadfiles/download.php script where user-controlled input in the path parameter can be navigated with “..” to trigger read access via file_get_c...

WordPress WP Content Source Control Plugin - Directory Traversal

This WP Content Source Control plugin is prone to a directory-traversal vulnerability via "download.php". It fails to clean up user-supplied input. Using this plugin allows an attacker to obtain an important information which could aid in further attacks. Solution Upgrade the plugin...