PT-2017-6861 · WordPress · Wp Ecommerce Shop Styling

Larry W. Cashdollar + 1 · Publicado 2017-05-23 · Atualizado 2017-06-01 · CVE-2015-5468

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP e-Commerce Shop Styling plugin versions prior to 2.6

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the filename parameter to the "includes/download.php" endpoint.

Recommendations For versions prior to 2.6, update to version 2.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the "includes/download.php" endpoint until the update is applied. Avoid using the filename parameter with untrusted input in the affected endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2015-5468

Produtos afetados

Wp Ecommerce Shop Styling

Referências · 7

• 🔥 http://openwall.com/lists/oss-security/2015/07/06/19 · Exploit
• 🔥 https://exploit-db.com/exploits/37530 · Exploit
• 🔥 http://vapid.dhs.org/advisory.php?v=136 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5468 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5468 · Nota
• https://wordpress.org/plugins/wp-ecommerce-shop-styling/#developers · Nota
• http://openwall.com/lists/oss-security/2015/07/10/4 · Correção