WordPress Download Manager Plugin Remote Code Execution and Remote File Include Vulnerabilities

Bugtraq ID:	71490
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 03 2014 12:00AM
Updated:	Dec 19 2014 12:53AM
Credit:	ethicalhack3r
Vulnerable:	WordPress Download Manager 2.2.3 WordPress Download Manager 2.2.2
Not Vulnerable:

WordPress Download Manager Plugin Remote Code Execution and Remote File Include Vulnerabilities

Download Manager plugin for WordPress is prone to a remote code-execution vulnerability and a remote file-include vulnerability.

An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the web server process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Versions prior to Download Manager 2.7.5 are vulnerable.

WordPress Download Manager Plugin Remote Code Execution and Remote File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following exploit is available:

• /data/vulnerabilities/exploits/71490.rb

WordPress Download Manager Plugin Remote Code Execution and Remote File Include Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WordPress Download Manager Plugin Remote Code Execution and Remote File Include Vulnerabilities

References: