PT-2015-6937 · Gd · Gd Bbpress Attachments

Luigi Gubello · Published 2015-08-18 · Updated 2016-12-22 · CVE-2015-5482

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GD bbPress Attachments plugin versions prior to 2.3

Description The issue allows remote administrators to include and execute arbitrary local files. This can be achieved by using a .. (dot dot) in the tab parameter in the "gdbbpress attachments" page to "wp-admin/edit.php".

Recommendations For versions prior to 2.3, update to version 2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "gdbbpress attachments" page in "wp-admin/edit.php" to minimize the risk of exploitation. Avoid using the tab parameter in the affected page until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-5482

Affected Products

Gd Bbpress Attachments

References · 6

• 🔥 https://security.dxw.com/advisories/local-file-include-vulnerability-in-gd-bbpress-attachments-allows-attackers-to-include-arbitrary-php-files · Exploit
• 🔥 https://packetstormsecurity.com/files/132656/wpgdbbpress-lfi.txt · Exploit
• https://wordpress.org/plugins/gd-bbpress-attachments/changelog · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-5482 · Security Note
• https://wpvulndb.com/vulnerabilities/8087 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5482 · Note