WordPress Infocus Theme '/infocus/lib/scripts/dl-skin.php' Local File Disclosure Vulnerability

Bugtraq ID:	67934
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 08 2014 12:00AM
Updated:	Jun 08 2014 12:00AM
Credit:	Felipe Andrian Peixoto
Vulnerable:	ENVATO Infocus 0
Not Vulnerable:

WordPress Infocus Theme '/infocus/lib/scripts/dl-skin.php' Local File Disclosure Vulnerability

The Infocus theme for WordPress is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.

Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.

WordPress Infocus Theme '/infocus/lib/scripts/dl-skin.php' Local File Disclosure Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/67934.html.txt

WordPress Infocus Theme '/infocus/lib/scripts/dl-skin.php' Local File Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WordPress Infocus Theme '/infocus/lib/scripts/dl-skin.php' Local File Disclosure Vulnerability

References:

• inFocus - Powerful Professional WordPress Theme (Webtreats)