The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2018/Sep/33 | Exploit Mailing List Third Party Advisory |
| https://github.com/julianburr/wp-plugin-localizemypost/issues/1 | Broken Link Third Party Advisory |
| https://packetstormsecurity.com/files/149433/WordPress-Localize-My-Post-1.0-Local-File-Inclusion.html | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/45439/ | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2018/Sep/33 | Exploit Mailing List Third Party Advisory |
| https://github.com/julianburr/wp-plugin-localizemypost/issues/1 | Broken Link Third Party Advisory |
| https://packetstormsecurity.com/files/149433/WordPress-Localize-My-Post-1.0-Local-File-Inclusion.html | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/45439/ | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2018/Sep/33 - Exploit, Mailing List, Third Party Advisory | |
| References | () https://github.com/julianburr/wp-plugin-localizemypost/issues/1 - Broken Link, Third Party Advisory | |
| References | () https://packetstormsecurity.com/files/149433/WordPress-Localize-My-Post-1.0-Local-File-Inclusion.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://www.exploit-db.com/exploits/45439/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2018-09-24 22:29
Updated : 2024-11-21 03:52
NVD link : CVE-2018-16299
Mitre link : CVE-2018-16299
CVE.ORG link : CVE-2018-16299
JSON object : View
Products Affected
localize_my_post_project
- localize_my_post
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')