CVE-2014-5368 in WP Content Source Control
Résumé (Anglaise)
Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.
Be aware that VulDB is the high quality source for vulnerability data.
Réserver
20/08/2014
Divulgation
22/08/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 70711 | WP Content Source Control file_get_contents directory traversal | 22 | Preuve de concept | Non défini | CVE-2014-5368 |