medium5.0Public exploit code
CVE-2014-4940
Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Tera Charts (tera-charts) - '/charts/zoomabletreemap.php?fn' Directory Traversal2014-05-28 · webapps · php · Verified
- WordPress Plugin Tera Charts (tera-charts) - '/charts/treemap.php?fn' Directory Traversal2014-05-28 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the fn parameter to (1) charts/treemap.php or (2) charts/zoomabletreemap.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tera Charts Plugin Project | Tera-Charts | Version 0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://codevigilant.com/disclosure/wp-plugin-tera-chart-local-file-inclusion/
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=851874%40tera-charts&old=799253%40tera-charts&sfp_email=&sfph_mail=
- http://codevigilant.com/disclosure/wp-plugin-tera-chart-local-file-inclusion/
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=851874%40tera-charts&old=799253%40tera-charts&sfp_email=&sfph_mail=