ID de Prueba:	1.3.6.1.4.1.25623.1.0.805106
Categoría:	Web application abuses
Título:	WordPress Paid Memberships Pro Directory Traversal Vulnerabilities
Resumen:	The WordPress plugin 'Paid Memberships Pro' is prone to a directory traversal vulnerability.
Descripción:	Summary: The WordPress plugin 'Paid Memberships Pro' is prone to a directory traversal vulnerability. Vulnerability Insight: Flaw exists as the 'REQUEST_URI' is not escaped and getfile.php is accessible to everyone. Vulnerability Impact: Successful exploitation will allow remote attackers to download arbitrary files. Affected Software/OS: WordPress Paid Memberships Pro version 1.7.14, prior versions may also be affected. Solution: Upgrade to version 1.7.15 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8801 BugTraq ID: 71293 http://www.securityfocus.com/bid/71293 http://www.exploit-db.com/exploits/35303 http://packetstormsecurity.com/files/129189/Paid-Memberships-Pro-1.7.14.2-Path-Traversal.html http://security.szurek.pl/paid-memberships-pro-17142-path-traversal.html XForce ISS Database: paidmembershi-cve20148801-dir-traversal(98805) https://exchange.xforce.ibmcloud.com/vulnerabilities/98805
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.