Lucene search
WpvulndbWPVDB-ID:9FD14F37-8C45-46F9-BCB6-8613D754DD1CHistoryAug 28, 2015 - 12:00 a.m.
Job Manager <= 0.7.25 - Insecure Direct Object Reference (IDOR)
2015-08-2800:00:00
wpscan.com
18
0.025 Low
EPSS
Percentile
90.3%
It is possible to enumerate the CV filename that is uploaded on the server and then access the CV file by performing a bruteforce attack to the wordpress upload directory structure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| job-manager | eq | * |
Related
cve
cve
CVE-2015-6668
2017-10-19 21:29:00
prion
prion
Directory traversal
2017-10-19 21:29:00
nvd
nvd
CVE-2015-6668
2017-10-19 21:29:00
cvelist
cvelist
CVE-2015-6668
2017-10-19 21:00:00