CVE-2015-5065

2015-06-2414:59:07

CWE-22

mitre

web.nvd.nist.gov

cve-2015-5065

absolute path traversal

proxy.php

google currency lookup

paypal currency converter

woocommerce plugin

remote attackers

arbitrary files

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.014

Percentile

86.7%

JSON

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter.

Affected configurations

Nvd

Node

intelligent-itpaypal_currency_converter_basic_for_woocommerceRange<1.4wordpress

VendorProductVersionCPE
intelligent-itpaypal_currency_converter_basic_for_woocommerce*cpe:2.3:a:intelligent-it:paypal_currency_converter_basic_for_woocommerce:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
intelligent-it	paypal_currency_converter_basic_for_woocommerce	*	cpe:2.3:a:intelligent-it:paypal_currency_converter_basic_for_woocommerce::::::wordpress::*