Lucene search

MitreCVE-2012-6652

HistoryMay 13, 2019 - 2:29 p.m.

CVE-2012-6652

2019-05-1314:29:00

CWE-22

mitre

web.nvd.nist.gov

cve-2012-6652

directory traversal

page flip book

wordpress

nvd

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.005

Percentile

75.3%

JSON

Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the pageflipbook_language parameter.

Affected configurations

Nvd

Node

page_flip_book_projectpage_flip_bookMatch-wordpress

VendorProductVersionCPE
page_flip_book_projectpage_flip_book-cpe:2.3:a:page_flip_book_project:page_flip_book:-:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
page_flip_book_project	page_flip_book	-	cpe:2.3:a:page_flip_book_project:page_flip_book:-:::::wordpress::

References

ceriksen.com/2012/07/10/wordpress-a-page-flip-book-plugin-local-file-inclusion-vulnerability/

wordpress.org/support/topic/pageflipbook-pageflipbook_language-parameter-local-file-inclusion/

www.openwall.com/lists/oss-security/2014/07/30/2

www.openwall.com/lists/oss-security/2014/07/31/8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.005

Percentile

75.3%

JSON

Related for CVE-2012-6652