CVEs-PoC/2014/CVE-2014-5368.md

CVE-2014-5368

Description

Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.

POC

Reference

• http://seclists.org/oss-sec/2014/q3/407

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/kenzer-templates