Description

WordPress Plugin Download Zip Attachments is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Download Zip Attachments version 1.0.0 is vulnerable.

Remediation

Edit the source code to ensure that input is properly verified or disable the plugin until a fix is available

References

http://www.vapidlabs.com/advisory.php?v=129

http://www.openwall.com/lists/oss-security/2015/06/23/4

http://seclists.org/oss-sec/2015/q2/787

https://packetstormsecurity.com/files/132459/Download-Zip-Attachments-1.0-File-Download.html

Related Vulnerabilities

WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.4)

Jboss EAP Improper Input Validation Vulnerability (CVE-2014-0034)

WordPress Plugin Duplicate Theme Unspecified Vulnerability (0.1.4)

phpList Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-6178)

WordPress Plugin WooCommerce Quick Reports Cross-Site Scripting (1.0.6)

Severity

High

Classification

CVE-2015-4704 CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure