codevigilant.com
http://codevigilant.com/disclosure/wp-plugin-bookx-local-file-inclusion CVE-2014-4937
WordPress Plugin BookX 1.7 - 'bookx_export.php' Local File Inclusion
Record summary
CVE-2014-4937 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin BookX 1.7 - 'bookx_export.php' Local File InclusionExploitDB exploitby Anant ShrivastavaNot analyzed1 file
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-4937