exploitDog

CVE-2018-16283

Опубликовано: 24 сент. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Высокий

Описание

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

Ссылки

http://seclists.org/fulldisclosure/2018/Sep/32
Exploit
Mailing List
Third Party Advisory
https://github.com/springjk/wordpress-wechat-broadcast/issues/14
Issue Tracking
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9132
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45438/
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/150202
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Sep/32
Exploit
Mailing List
Third Party Advisory
https://github.com/springjk/wordpress-wechat-broadcast/issues/14
Issue Tracking
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9132
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45438/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wechat_brodcast_project:wechat_brodcast:*:*:*:*:*:wordpress:*:*

Версия до 1.2.0 (включая)

EPSS

Процентиль: 99%

0.77894

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-x3c5-gxcq-2hm9

CVSS3: 9.8

github

больше 3 лет назад

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

EPSS

Процентиль: 99%

0.77894

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22