CVE-2014-5368 in WP Content Source Controlinfo

Zusammenfassung (Englisch)

Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.

Reservieren

20.08.2014

Veröffentlichung

22.08.2014

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
70711	WP Content Source Control file_get_contents Directory Traversal	22	Proof-of-Concept	Nicht definiert	CVE-2014-5368

Beschreibung

CPE

CWE

CVSS

Exploits

History

Diff

Verknüpfen

Threat Intelligence

API JSON

API XML

API CSV

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!