CVE-2015-4616 in Easy2Map Plugin
Summary
Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. (dot dot) in the map_id parameter.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
06/16/2015
Disclosure
07/08/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 76338 | Easy2Map Plugin MapPinImageSave.php path traversal | 22 | Proof-of-Concept | Official fix | CVE-2015-4616 |