mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-10 11:57:37 +02:00
803 B
803 B
CVE-2015-4704
Description
Directory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter to download.php.
POC
Reference
- http://packetstormsecurity.com/files/132459/Download-Zip-Attachments-1.0-File-Download.html
- http://packetstormsecurity.com/files/132459/Download-Zip-Attachments-1.0-File-Download.html
Github
No PoCs found on GitHub currently.