Directory Traversal Vulnerability in Page Flip Image Gallery Plugin for WordPress
CVE-2008-5752

Currently unrated

Key Information:

Vendor

Wordpress

Vendor
CVE Published:
30 December 2008

What is CVE-2008-5752?

The Page Flip Image Gallery plugin for WordPress is susceptible to a directory traversal vulnerability when the 'magic_quotes_gpc' setting is disabled. This flaw enables remote attackers to manipulate the 'book_id' parameter, allowing them to access arbitrary files on the server. The risk lies in an attacker's ability to exploit the '..' (dot dot) syntax to traverse the directory structure, potentially exposing sensitive information and configuration files.

References

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.