WordPress NativeChurch Theme 'download.php' Arbitrary File Download Vulnerability
BID:75207
Info
WordPress NativeChurch Theme 'download.php' Arbitrary File Download Vulnerability
| Bugtraq ID: | 75207 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2015 12:00AM |
| Updated: | Jun 16 2015 12:00AM |
| Credit: | Arash Khazaei |
| Vulnerable: |
WordPress NativeChurch 1.5 WordPress NativeChurch 1.0 |
| Not Vulnerable: | |
Discussion
WordPress NativeChurch Theme 'download.php' Arbitrary File Download Vulnerability
The NativeChurch theme for WordPress is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit this issue to download arbitrary files within the context of the web server process. Information obtained may aid in further attacks.
The NativeChurch theme for WordPress is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit this issue to download arbitrary files within the context of the web server process. Information obtained may aid in further attacks.
Solution / Fix
WordPress NativeChurch Theme 'download.php' Arbitrary File Download Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].