PT-2014-5991
CVE-2014-4577
·
تاريخ النشر
2014-10-21
·
تاريخ التحديث
2014-11-06
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
WP AmASIN - The Amazon Affiliate Shop plugin versions 0.9.6 and earlier
Description
The issue allows remote attackers to read arbitrary files via a full pathname in the
url parameter of the reviews.php file.Recommendations
For WP AmASIN - The Amazon Affiliate Shop plugin versions 0.9.6 and earlier, update to a version later than 0.9.6 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾