CVE-2011-1669

The CVE-2011-1669 entry corresponds to a directory traversal (Local File Inclusion) vulnerability in the WordPress WP Custom Pages plugin, affecting version 0.5.0.1. According to connected sources, the flaw resides in wp-download.php and allows remote attackers to read arbitrary server files by s...

CVE-2011-1669: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter...

Sql injection

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2008-1646

CVE-2008-1646 is an SQL injection vulnerability in the WordPress plugin WP-Download 1.2 , affecting the file wp-download.php via the dl_id parameter. The underlying issue is improper handling of input leading to arbitrary SQL execution by remote attackers. Public details in the connected document...