WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI) Detection

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

CVE-2011-1669

The CVE-2011-1669 entry corresponds to a directory traversal (Local File Inclusion) vulnerability in the WordPress WP Custom Pages plugin, affecting version 0.5.0.1. According to connected sources, the flaw resides in wp-download.php and allows remote attackers to read arbitrary server files by s...

CVE-2011-1669: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter...

PT-2011-3280

Name of the Vulnerable Software and Affected Versions WP Custom Pages module version 0.5.0.1 for WordPress Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the wp-download.php file. This is achieved by using ..%2F encoded dot dot...

Sql injection

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2008-1646

CVE-2008-1646 is an SQL injection vulnerability in the WordPress plugin WP-Download 1.2 , affecting the file wp-download.php via the dl_id parameter. The underlying issue is improper handling of input leading to arbitrary SQL execution by remote attackers. Public details in the connected document...