Lucene search
WpvulndbWPVDB-ID:9EFB7005-A490-42B4-B7B6-B6AC5AF072F0HistoryOct 20, 2023 - 12:00 a.m.
Icegram Express < 5.6.24 - Admin+ Directory Traversal
2023-10-2000:00:00
wpscan.com
11
icegram express
directory traversal
admin+ vulnerability
path traversal vector
file system access
Description The plugin is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by the web server via a path traversal vector.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 5.6.24 |
Related
openvas
openvas
WordPress Icegram Express Plugin < 5.6.24 Path Traversal Vulnerability
2023-10-23 00:00:00
cve
cve
CVE-2023-5414
2023-10-20 07:15:17
prion
prion
Directory traversal
2023-10-20 07:15:00
nvd
nvd
CVE-2023-5414
2023-10-20 07:15:17
cvelist
cvelist
CVE-2023-5414
2023-10-20 06:35:19
wordfence
wordfence
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.7%
Related for WPVDB-ID:9EFB7005-A490-42B4-B7B6-B6AC5AF072F0