CVE-2008-5752 Page Flip Image Gallery <= 0.2.2 - Directory Traversal
MediumCVSS 4.3
EPSS 5.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress page flip image gallery plugin | <= 0.2.2 | No fix listed |
| wordpress page flip image gallery plugin | = 0.1 | No fix listed |
| wordpress page flip image gallery plugin | = 0.1.1 | No fix listed |
| wordpress page flip image gallery plugin | = 0.1.3 | No fix listed |
| wordpress page flip image gallery plugin | = 0.1.4 | No fix listed |
| wordpress page flip image gallery plugin | = 0.1.6 | No fix listed |
| wordpress page flip image gallery plugin | = 0.2.0 | No fix listed |
| wordpress page flip image gallery plugin | = 0.2.1 | No fix listed |
| wordpress page-flip-image-gallery(WordPress) | <= 0.2.2 | No fix listed |
References
- 50902 exploit vdb-entry
- 33274 third-party-advisory vendor-advisory
- 4836 third-party-advisory
- 32966 exploit vdb-entry
- pageflipimagegal-getconfig-dir-traversal(47568) vdb-entry
- 7543 exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org