CVE-2014-9461 Cart66 Lite - WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure
LowCVSS 3.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the member_download action to wp-admin/admin-ajax.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| reality66 cart66 lite | <= 1.5.3 | No fix listed |
| wordpress cart66-lite(WordPress) | < 1.5.4 | 1.5.4 |
References
- plugins.trac.wordpress.org
- research.g0blin.co.uk exploit
- wordpress.org
- Wordfence Intelligence third-party-advisory
- www.cve.org