Summary
This host is installed with WordPress
Paid Memberships Pro plugin and is prone to directory traversal vulnerability.
Impact
Successful exploitation will allow remote
attackers to download arbitrary files.
Impact Level: Application
Solution
Upgrade to version 1.7.15 or later,
For updates refer https://wordpress.org/plugins/paid-memberships-pro
Insight
Flaw exists as the 'REQUEST_URI' is not
escaped and getfile.php is accessible to everyone.
Affected
WordPress Paid Memberships Pro version
1.7.14, prior versions may also be affected.
Detection
Send a crafted data via HTTP GET request
and check whether it is able to read arbitrary files or not.
References
Severity
Classification
-
CVE CVE-2014-8801 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- 12Planet Chat Server one2planet.infolet.InfoServlet XSS
- APC PowerChute Network Shutdown HTTP Response Splitting Vulnerability
- Aardvark Topsites PHP 'index.php' Multiple Cross Site Scripting Vulnerabilities
- Allegro RomPager HTTP Referer Header Cross Site Scripting Vulnerability
- Adobe JRun Management Console Multiple Vulnerabilities