WordPress Paid Memberships Pro Plugin 'admin-ajax.php' Directory Traversal Vulnerability
BID:71293
Info
WordPress Paid Memberships Pro Plugin 'admin-ajax.php' Directory Traversal Vulnerability
| Bugtraq ID: | 71293 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-8801 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 25 2014 12:00AM |
| Updated: | Nov 25 2014 12:00AM |
| Credit: | Kacper Szurek |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
WordPress Paid Memberships Pro Plugin 'admin-ajax.php' Directory Traversal Vulnerability
The Paid Memberships Pro plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks.
Paid Memberships Pro 1.7.14.2 is vulnerable; other versions may also be affected.
The Paid Memberships Pro plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks.
Paid Memberships Pro 1.7.14.2 is vulnerable; other versions may also be affected.
Exploit / POC
WordPress Paid Memberships Pro Plugin 'admin-ajax.php' Directory Traversal Vulnerability
The following example data is available:
www.example.com/wp-admin/admin-ajax.php?action=getfile&/../../wp-config.php
The following example data is available:
www.example.com/wp-admin/admin-ajax.php?action=getfile&/../../wp-config.php
Solution / Fix
WordPress Paid Memberships Pro Plugin 'admin-ajax.php' Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
WordPress Paid Memberships Pro Plugin 'admin-ajax.php' Directory Traversal Vulnerability
References:
References: