Published: 29/05/2014 Updated: 29/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in the Google Doc Embedder plugin prior to 2.5.4 for WordPress allows remote malicious users to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
davistribe google doc embedder
davistribe google doc embedder 2.0
davistribe google doc embedder 2.1
davistribe google doc embedder 2.2
davistribe google doc embedder 2.2.1
davistribe google doc embedder 2.2.2
davistribe google doc embedder 2.2.3
davistribe google doc embedder 2.3
davistribe google doc embedder 2.4
davistribe google doc embedder 2.4.1
davistribe google doc embedder 2.4.2
davistribe google doc embedder 2.4.3
davistribe google doc embedder 2.4.4
davistribe google doc embedder 2.4.5
davistribe google doc embedder 2.4.6
davistribe google doc embedder 2.5
davistribe google doc embedder 2.5.1
davistribe google doc embedder 2.5.2

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # web site for more information on licensing and terms of use # metasploitcom/ ## require 'msf/core' require 'rbmysql' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking inclu ...

Drills through git commit histories to find vulnerability IDs in change logs.

git_vul_driller Crawl the logs of a git repo and find commits matching a regex Getting started Edit config_metasploityaml as needed Edit config_edbyaml as needed Set up your environment (Hint: Use a virtual env) $ conda create -n myenv --python=38 $ conda activate myenv $ pip install -r requirementstxt $ python setuppy install Run

CWE-22 http://www.securityfocus.com/bid/57133 http://secunia.com/advisories/50832 http://osvdb.org/88891 https://exchange.xforce.ibmcloud.com/vulnerabilities/80930 https://nvd.nist.gov https://github.com/CERTCC/git_vul_driller https://www.exploit-db.com/exploits/23970/

CVE-2012-4915

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect