CVE-2014-8585

Exploit

EPSS 2.85%
Veröffentlicht 04.11.2014 15:55:06
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the fname parameter to (1) views/file_download.php or (2) file_download.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 104 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

W3eden ≫ Download Manager Version 1.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.2.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.2.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.2.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.2.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.2.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.5.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.5.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.5.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.5.9 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.5.32 SwPlatform wordpress

W3eden ≫ Download Manager Version 1.5.33 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.6 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.7 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.8 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.9 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.10 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.11 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.12 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.13 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.14 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.15 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.16 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.17 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.18 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.0.19 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.1.0 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.1.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.1.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.1.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.0 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.6 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.7 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.8 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.2.9 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.0 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.6 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.7 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.8 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.3.9 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.0 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.6 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.7 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.8 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.4.9 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.0 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.6 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.7 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.8 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.9 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.91 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.92 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.93 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.94 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.95 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.96 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.97 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.98 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.5.99 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.0 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.1 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.2 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.3 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.4 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.5 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.6 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.7 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.8 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.9 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.91 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.92 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.93 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.94 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.95 SwPlatform wordpress

W3eden ≫ Download Manager Version 2.6.96 SwPlatform wordpress

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.85%	0.849

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://packetstormsecurity.com/files/128852/WordPress-Download-Manager-Arbitrary-File-Download.html

Exploit

http://www.securityfocus.com/bid/70764

https://exchange.xforce.ibmcloud.com/vulnerabilities/98318

https://nvd.nist.gov/vuln/detail/CVE-2014-8585

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8585

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8585

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2014-8585