Absolute Path Traversal Vulnerability in WP AmASIN - The Amazon Affiliate Shop Plugin
CVE-2014-4577

Currently unrated

Key Information:

Vendor

Wordpress
Status
WP Amasin - The Amazon Affiliate Shop
Vendor
CVE Published:
21 October 2014

What is CVE-2014-4577?

An absolute path traversal vulnerability exists in the reviews.php file of the WP AmASIN - The Amazon Affiliate Shop plugin prior to version 0.9.6 for WordPress. This flaw enables remote attackers to exploit it by crafting a special URL that allows access to arbitrary files on the server via the url parameter. Such unauthorized access poses a significant risk, permitting attackers to read sensitive information stored on the server, potentially leading to further attacks or data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://codevigilant.com/disclosure/wp-plugin-wp-amasin-th...
x_refsource_MISC
http://plugins.svn.wordpress.org/wp-amasin-the-amazon-aff...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.