CVE-2008-5752

Опубликовано: 30 дек. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:*:*:*:*:*:*:*:*

Версия до 0.2.2 (включая)

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.06314

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-grpp-29wc-7cg7

github

около 3 лет назад