CVE-2012-3588 | BDVDB-2026-50608 Detail

Description#

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the data parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/49464
https://exchange.xforce.ibmcloud.com/vulnerabilities/76171
http://www.exploit-db.com/exploits/19018
http://www.opensyscom.fr/Actualites/wordpress-plugins-plugin-newsletter-remote-file-disclosure-vulnerability.html

Exploit#

http://www.exploit-db.com/exploits/19018

History#

Version 12012-06-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.