CVE-2014-5368 in WP Content Source Control
Сводка (Английский)
Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.
Резервировать
20.08.2014
Раскрытие
22.08.2014
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 70711 | WP Content Source Control file_get_contents обход каталога | 22 | Доказательство концепции | Не определено | CVE-2014-5368 |