Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2014-9734
HistoryJun 30, 2015 - 2:59 p.m.

CVE-2014-9734

2015-06-3014:59:00
CWE-22
mitre
web.nvd.nist.gov
60
cve
2014
9734
directory traversal
slider revolution
revslider
wordpress
remote attack
arbitrary files
img parameter
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

9

Confidence

High

EPSS

0.786

Percentile

98.3%

JSON

Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a … (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php.

Affected configurations

Nvd
Node
themepunchslider_revolutionRange≤4.1.4wordpress
VendorProductVersionCPE
themepunchslider_revolution*cpe:2.3:a:themepunch:slider_revolution:*:*:*:*:*:wordpress:*:*

Related

prion 2
nvd 2
patchstack 1
openvas 3
cvelist 2
checkpoint_advisories 1
exploitdb 2
nuclei 1
packetstorm 1
cve 1
threatpost 1
prion
prion
Directory traversal
2015-06-30 14:59:00
Directory traversal
2015-02-11 19:59:00
nvd
nvd
CVE-2014-9734
2015-06-30 14:59:00
CVE-2015-1579
2015-02-11 19:59:06
patchstack
patchstack
WordPress Slider Revolution Plugin <= 4.1.4 - Arbitrary File Download
2015-03-30 00:00:00
openvas
openvas
WordPress Revslider Arbitrary File Download Vulnerability
2015-07-10 00:00:00
WordPress Slider Revolution Arbitrary File Download Vulnerability
2015-03-31 00:00:00
WordPress Multiple Plugins / Themes Directory Traversal / File Download Vulnerability (HTTP)
2020-11-20 00:00:00
cvelist
cvelist
CVE-2014-9734
2015-06-30 14:00:00
CVE-2015-1579
2015-02-11 19:00:00
checkpoint_advisories
checkpoint_advisories
WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)
2014-12-17 00:00:00
exploitdb
exploitdb
WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download
2015-03-30 00:00:00
Mulitple WordPress Themes - &#039;admin-ajax.php?img&#039; Arbitrary File Download
2014-09-01 00:00:00
nuclei
nuclei
WordPress Slider Revolution - Local File Disclosure
2021-11-21 11:30:25
packetstorm
packetstorm
WordPress Elegant Themes Divi Theme Directory Traversal Nmap NSE Script
2017-04-07 00:00:00
cve
cve
CVE-2015-1579
2015-02-11 19:59:06
threatpost
threatpost
Attackers Target 1M+ WordPress Sites To Harvest Database Credentials
2020-06-03 20:37:44

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

9

Confidence

High

EPSS

0.786

Percentile

98.3%

JSON
Related for CVE-2014-9734
prion2nvd2patchstack1openvas3cvelist2checkpoint_advisories1exploitdb2nuclei1packetstorm1cve1threatpost1