WordPress Zip Attachments Plugin 'download.php' Arbitrary File Download Vulnerability
BID:75211
Info
WordPress Zip Attachments Plugin 'download.php' Arbitrary File Download Vulnerability
| Bugtraq ID: | 75211 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-4694 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2015 12:00AM |
| Updated: | Jul 15 2015 12:39AM |
| Credit: | Larry W. Cashdollar |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
WordPress Zip Attachments Plugin 'download.php' Arbitrary File Download Vulnerability
The Zip Attachments plugin for WordPress is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit this issue to download arbitrary files within the context of the web server process. Information obtained may aid in further attacks.
Zip Attachments 1.1.4 and prior versions are vulnerable.
The Zip Attachments plugin for WordPress is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit this issue to download arbitrary files within the context of the web server process. Information obtained may aid in further attacks.
Zip Attachments 1.1.4 and prior versions are vulnerable.
Exploit / POC
WordPress Zip Attachments Plugin 'download.php' Arbitrary File Download Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
WordPress Zip Attachments Plugin 'download.php' Arbitrary File Download Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
WordPress Zip Attachments Plugin 'download.php' Arbitrary File Download Vulnerability
References:
References: