PT-2019-7429 · WordPress · History-Collection Plugin

Publicado 2019-10-10 · Atualizado 2019-10-16 · CVE-2015-9470

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions history-collection plugin versions through 1.1.1 for WordPress

Description The issue concerns directory traversal via the var parameter in the download.php endpoint. This allows unauthorized access to sensitive files and directories.

Recommendations For history-collection plugin versions through 1.1.1, consider disabling the download.php endpoint until a patch is available. Restrict access to the var parameter in the download.php endpoint to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2015-9470

Produtos afetados

History-Collection Plugin

Referências · 6

• 🔥 https://packetstormsecurity.com/files/132279 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9470 · Nota
• https://t.me/cibsecurity/7346 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-9470 · Nota de Segurança
• https://wordpress.org/plugins/history-collection/#developers · Nota
• https://t.me/cibsecurity/7464 · Publicação no Telegram