5
CVSSv2

CVE-2014-4937

Published: 11/07/2014 Updated: 14/07/2014
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote malicious users to read arbitrary files via a .. (dot dot) in the file parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

bookx plugin project bookx 1.7

Exploits

source: wwwsecurityfocuscom/bid/68556/info BookX plugin for WordPress is prone to a local file-include vulnerability because it fails to adequately validate user-supplied input An attacker can exploit this vulnerability to obtain potentially sensitive information; other attacks are also possible BookX plugin 17 is vulnerable; other v ...