CVE-2014-8585
MEDIUM
5.0
CVSS 2.0
Description
Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the fname parameter to (1) views/file_download.php or (2) file_download.php.
Affected products and versions
- n/a n/a — Versions not specified
- w3eden download_manager — Version 1.1
- w3eden download_manager — Version 1.2
- w3eden download_manager — Version 1.2.1
- w3eden download_manager — Version 1.2.2
- w3eden download_manager — Version 1.2.3
- w3eden download_manager — Version 1.2.4
- w3eden download_manager — Version 1.2.5
- w3eden download_manager — Version 1.3
- w3eden download_manager — Version 1.4
- w3eden download_manager — Version 1.5
- w3eden download_manager — Version 1.5.1
- w3eden download_manager — Version 1.5.2
- w3eden download_manager — Version 1.5.3
- w3eden download_manager — Version 1.5.9
- w3eden download_manager — Version 1.5.32
- w3eden download_manager — Version 1.5.33
- w3eden download_manager — Version 2.0.1
- w3eden download_manager — Version 2.0.2
- w3eden download_manager — Version 2.0.3
- w3eden download_manager — Version 2.0.4
- w3eden download_manager — Version 2.0.5
- w3eden download_manager — Version 2.0.6
- w3eden download_manager — Version 2.0.7
- w3eden download_manager — Version 2.0.8
- w3eden download_manager — Version 2.0.9
- w3eden download_manager — Version 2.0.10
- w3eden download_manager — Version 2.0.11
- w3eden download_manager — Version 2.0.12
- w3eden download_manager — Version 2.0.13
- w3eden download_manager — Version 2.0.14
- w3eden download_manager — Version 2.0.15
- w3eden download_manager — Version 2.0.16
- w3eden download_manager — Version 2.0.17
- w3eden download_manager — Version 2.0.18
- w3eden download_manager — Version 2.0.19
- w3eden download_manager — Version 2.1.0
- w3eden download_manager — Version 2.1.1
- w3eden download_manager — Version 2.1.2
- w3eden download_manager — Version 2.1.3
- w3eden download_manager — Version 2.2.0
- w3eden download_manager — Version 2.2.1
- w3eden download_manager — Version 2.2.2
- w3eden download_manager — Version 2.2.3
- w3eden download_manager — Version 2.2.4
- w3eden download_manager — Version 2.2.5
- w3eden download_manager — Version 2.2.6
- w3eden download_manager — Version 2.2.7
- w3eden download_manager — Version 2.2.8
- w3eden download_manager — Version 2.2.9
- w3eden download_manager — Version 2.3.0
- w3eden download_manager — Version 2.3.1
- w3eden download_manager — Version 2.3.2
- w3eden download_manager — Version 2.3.3
- w3eden download_manager — Version 2.3.4
- w3eden download_manager — Version 2.3.5
- w3eden download_manager — Version 2.3.6
- w3eden download_manager — Version 2.3.7
- w3eden download_manager — Version 2.3.8
- w3eden download_manager — Version 2.3.9
- w3eden download_manager — Version 2.4.0
- w3eden download_manager — Version 2.4.1
- w3eden download_manager — Version 2.4.2
- w3eden download_manager — Version 2.4.3
- w3eden download_manager — Version 2.4.4
- w3eden download_manager — Version 2.4.5
- w3eden download_manager — Version 2.4.6
- w3eden download_manager — Version 2.4.7
- w3eden download_manager — Version 2.4.8
- w3eden download_manager — Version 2.4.9
- w3eden download_manager — Version 2.5.0
- w3eden download_manager — Version 2.5.1
- w3eden download_manager — Version 2.5.2
- w3eden download_manager — Version 2.5.3
- w3eden download_manager — Version 2.5.4
- w3eden download_manager — Version 2.5.5
- w3eden download_manager — Version 2.5.6
- w3eden download_manager — Version 2.5.7
- w3eden download_manager — Version 2.5.8
- w3eden download_manager — Version 2.5.9
- w3eden download_manager — Version 2.5.91
- w3eden download_manager — Version 2.5.92
- w3eden download_manager — Version 2.5.93
- w3eden download_manager — Version 2.5.94
- w3eden download_manager — Version 2.5.95
- w3eden download_manager — Version 2.5.96
- w3eden download_manager — Version 2.5.97
- w3eden download_manager — Version 2.5.98
- w3eden download_manager — Version 2.5.99
- w3eden download_manager — Version 2.6.0
- w3eden download_manager — Version 2.6.1
- w3eden download_manager — Version 2.6.2
- w3eden download_manager — Version 2.6.3
- w3eden download_manager — Version 2.6.4
- w3eden download_manager — Version 2.6.5
- w3eden download_manager — Version 2.6.6
- w3eden download_manager — Version 2.6.7
- w3eden download_manager — Version 2.6.8
- w3eden download_manager — Version 2.6.9
- w3eden download_manager — Version 2.6.91
- w3eden download_manager — Version 2.6.92
- w3eden download_manager — Version 2.6.93
- w3eden download_manager — Version 2.6.94
- w3eden download_manager — Version 2.6.95
- w3eden download_manager — Version 2.6.96
References
- packetstormsecurity.com http://packetstormsecurity.com/files/128852/WordPress-Download-Manager-Arbitrary-File-Download.html Exploit
- www.securityfocus.com http://www.securityfocus.com/bid/70764
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/98318
- nvd.nist.gov Official NVD record