high7.5Public exploit code
CVE-2018-9118
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Background Takeover < 4.1.4 - Directory Traversal2018-04-09 · webapps · php
Impact
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 99robots | Wp Background Takeover Advertisements | before 4.1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://99robots.com/docs/wp-background-takeover-advertisements/
- https://wpvulndb.com/vulnerabilities/9056
- https://www.exploit-db.com/exploits/44417/
- https://99robots.com/docs/wp-background-takeover-advertisements/
- https://wpvulndb.com/vulnerabilities/9056
- https://www.exploit-db.com/exploits/44417/