medium5.0Public exploit code
CVE-2011-1669
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion2011-04-05 · webapps · php
Impact
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mikoviny | Wp Custom Pages | Version 0.5.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/71707
- http://secunia.com/advisories/43963
- http://www.autosectools.com/Advisories/WordPress.WP.Custom.Pages.0.5.0.1_Local.File.Inclusion_169.html
- http://www.exploit-db.com/exploits/17119
- http://www.securityfocus.com/bid/47146
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66559
- http://osvdb.org/71707
- http://secunia.com/advisories/43963
- http://www.autosectools.com/Advisories/WordPress.WP.Custom.Pages.0.5.0.1_Local.File.Inclusion_169.html
- http://www.exploit-db.com/exploits/17119
- http://www.securityfocus.com/bid/47146
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66559