CVE-2009-4672 Lytebox <= 1.3 - Local File Inclusion
HighCVSS 7.5
EPSS 9.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pg parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grupenet wp-lytebox | = 1.3 | No fix listed |
| wordpress wp-lytebox(WordPress) | <= 1.3 | No fix listed |
References
- 35244 third-party-advisory vendor-advisory
- 8791 exploit
- 35098 exploit vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org