Lucene search
Larry W. CashdollarWPVDB-ID:40E84E85-7176-4552-B021-6963D0396543HistoryAug 02, 2015 - 12:00 a.m.
simple-image-manipulator <= 1.0 - Remote File Download
2015-08-0200:00:00
Larry W. Cashdollar
wpscan.com
4
0.032 Low
EPSS
Percentile
91.2%
Plugin is still affected and has been closed. In ./simple-image-manipulator/controller/download.php no checks are made to authenticate the user or sanitize input when determining file location.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| simple-image-manipulator | eq | * |
Related
cve
cve
CVE-2015-1000010
2016-10-06 14:59:11
wpexploit
wpexploit
simple-image-manipulator <= 1.0 - Remote File Download
2015-08-02 00:00:00
nuclei
nuclei
WordPress Simple Image Manipulator < 1.0 - Local File Inclusion
2022-02-12 18:14:11
nvd
nvd
CVE-2015-1000010
2016-10-06 14:59:11
cvelist
cvelist
CVE-2015-1000010
2016-10-06 14:00:00
prion
prion
Remote file inclusion
2016-10-06 14:59:00
openvas
openvas