CVE-2008-5752

Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:*:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.2.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.4:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Information

Published : 2008-12-30 09:30

Updated : 2017-09-28 18:32


NVD link : CVE-2008-5752

Mitre link : CVE-2008-5752


JSON object : View

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

dedicated server usa

Products Affected

wordpress

  • page_flip_image_gallery_plugin
  • wordpress