PT-2023-9953 · WordPress · Halulu Simple-Download-Button-Shortcode Plugin

CVE-2012-10016

·

Publicado

2023-10-16

·

Atualizado

2024-05-17

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Halulu simple-download-button-shortcode Plugin version 1.0
Description A vulnerability has been found in the Halulu simple-download-button-shortcode Plugin on WordPress. The issue affects an unknown function of the file simple-download-button dl.php of the component Download Handler. The manipulation of the file argument leads to information disclosure. It is possible to launch the attack remotely.
Recommendations For Halulu simple-download-button-shortcode Plugin version 1.0, upgrade to version 1.1 to address this issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-10016

Produtos afetados

Halulu Simple-Download-Button-Shortcode Plugin