PT-2015-6937 · Gd · Gd Bbpress Attachments

Luigi Gubello · Publicado 2015-08-18 · Atualizado 2016-12-22 · CVE-2015-5482

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GD bbPress Attachments plugin versions prior to 2.3

Description The issue allows remote administrators to include and execute arbitrary local files. This can be achieved by using a .. (dot dot) in the tab parameter in the "gdbbpress attachments" page to "wp-admin/edit.php".

Recommendations For versions prior to 2.3, update to version 2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "gdbbpress attachments" page in "wp-admin/edit.php" to minimize the risk of exploitation. Avoid using the tab parameter in the affected page until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2015-5482

Produtos afetados

Gd Bbpress Attachments

Referências · 6

• 🔥 https://security.dxw.com/advisories/local-file-include-vulnerability-in-gd-bbpress-attachments-allows-attackers-to-include-arbitrary-php-files · Exploit
• 🔥 https://packetstormsecurity.com/files/132656/wpgdbbpress-lfi.txt · Exploit
• https://wpvulndb.com/vulnerabilities/8087 · Nota
• https://wordpress.org/plugins/gd-bbpress-attachments/changelog · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5482 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5482 · Nota de Segurança