Veille CVE

Recherche « James Charlesworth TinyMCE Thumbnail Gallery »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « James Charlesworth TinyMCE Thumbnail Gallery » ✕
  1. CVE-2012-20002 7.5 Élevée

    James Charlesworth TinyMCE Thumbnail Gallery

    TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like ../../../../wp-config.php to retrieve database credentials and system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.