Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-10136.
PoCs published by Unknown, including Metasploit module auxiliary/scanner/http/wp_gimedia_library_file_read.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in the WordPress GI-Media Library plugin (version 2.2.2) to read arbitrary files from the server. It uses a base64-encoded traversal path to bypass restrictions and retrieve files like wp-config.php.
Description
The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
Exploits (1)
This Metasploit module exploits a directory traversal vulnerability in the WordPress GI-Media Library plugin (version 2.2.2) to read arbitrary files from the server. It uses a base64-encoded traversal path to bypass restrictions and retrieve files like wp-config.php.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N