CVE-2015-5472

Опубликовано: 15 сент. 2015

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Absolute path traversal vulnerability in lib/download.php in the IBS Mappro plugin before 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter.

Ссылки

http://www.vapid.dhs.org/advisory.php?v=137
Exploit
https://wordpress.org/plugins/ibs-mappro/changelog/
Vendor Advisory
https://wpvulndb.com/vulnerabilities/8091
Exploit
http://www.vapid.dhs.org/advisory.php?v=137
Exploit
https://wordpress.org/plugins/ibs-mappro/changelog/
Vendor Advisory
https://wpvulndb.com/vulnerabilities/8091
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibs_mappro_project:ibs_mappro:*:*:*:*:*:wordpress:*:*

Версия до 0.6 (включая)

EPSS

Процентиль: 76%

0.00928

Низкий

7.8 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-xhfp-fvfc-xjmx

github

больше 3 лет назад