CVE-2015-5065

Опубликовано: 24 июн. 2015

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter.

Ссылки

http://packetstormsecurity.com/files/132278/WordPress-Paypal-Currency-Converter-Basic-For-Woocommerce-1.3-File-Read.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/75416
Third Party Advisory
VDB Entry
https://plugins.trac.wordpress.org/changeset/1179092/paypal-currency-converter-basic-for-woocommerce
Third Party Advisory
https://wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/changelog/
Patch
Third Party Advisory
https://www.exploit-db.com/exploits/37253/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/132278/WordPress-Paypal-Currency-Converter-Basic-For-Woocommerce-1.3-File-Read.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/75416
Third Party Advisory
VDB Entry
https://plugins.trac.wordpress.org/changeset/1179092/paypal-currency-converter-basic-for-woocommerce
Third Party Advisory
https://wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/changelog/
Patch
Third Party Advisory
https://www.exploit-db.com/exploits/37253/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:intelligent-it:paypal_currency_converter_basic_for_woocommerce:*:*:*:*:*:wordpress:*:*

Версия до 1.4 (исключая)

EPSS

Процентиль: 97%

0.41339

Средний

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-j7p5-9jv3-vq8j

github

больше 3 лет назад