CVE-2014-8585

Exploit

EPSS 0.2%
Veröffentlicht 04.11.2014 15:55:06
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the fname parameter to (1) views/file_download.php or (2) file_download.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

W3eden ≫ Download Manager Version1.1 SwPlatformwordpress

W3eden ≫ Download Manager Version1.2 SwPlatformwordpress

W3eden ≫ Download Manager Version1.2.1 SwPlatformwordpress

W3eden ≫ Download Manager Version1.2.2 SwPlatformwordpress

W3eden ≫ Download Manager Version1.2.3 SwPlatformwordpress

W3eden ≫ Download Manager Version1.2.4 SwPlatformwordpress

W3eden ≫ Download Manager Version1.2.5 SwPlatformwordpress

W3eden ≫ Download Manager Version1.3 SwPlatformwordpress

W3eden ≫ Download Manager Version1.4 SwPlatformwordpress

W3eden ≫ Download Manager Version1.5 SwPlatformwordpress

W3eden ≫ Download Manager Version1.5.1 SwPlatformwordpress

W3eden ≫ Download Manager Version1.5.2 SwPlatformwordpress

W3eden ≫ Download Manager Version1.5.3 SwPlatformwordpress

W3eden ≫ Download Manager Version1.5.9 SwPlatformwordpress

W3eden ≫ Download Manager Version1.5.32 SwPlatformwordpress

W3eden ≫ Download Manager Version1.5.33 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.1 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.2 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.3 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.4 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.5 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.6 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.7 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.8 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.9 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.10 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.11 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.12 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.13 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.14 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.15 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.16 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.17 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.18 SwPlatformwordpress

W3eden ≫ Download Manager Version2.0.19 SwPlatformwordpress

W3eden ≫ Download Manager Version2.1.0 SwPlatformwordpress

W3eden ≫ Download Manager Version2.1.1 SwPlatformwordpress

W3eden ≫ Download Manager Version2.1.2 SwPlatformwordpress

W3eden ≫ Download Manager Version2.1.3 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.0 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.1 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.2 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.3 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.4 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.5 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.6 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.7 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.8 SwPlatformwordpress

W3eden ≫ Download Manager Version2.2.9 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.0 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.1 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.2 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.3 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.4 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.5 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.6 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.7 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.8 SwPlatformwordpress

W3eden ≫ Download Manager Version2.3.9 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.0 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.1 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.2 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.3 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.4 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.5 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.6 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.7 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.8 SwPlatformwordpress

W3eden ≫ Download Manager Version2.4.9 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.0 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.1 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.2 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.3 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.4 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.5 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.6 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.7 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.8 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.9 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.91 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.92 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.93 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.94 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.95 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.96 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.97 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.98 SwPlatformwordpress

W3eden ≫ Download Manager Version2.5.99 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.0 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.1 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.2 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.3 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.4 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.5 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.6 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.7 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.8 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.9 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.91 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.92 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.93 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.94 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.95 SwPlatformwordpress

W3eden ≫ Download Manager Version2.6.96 SwPlatformwordpress

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.428

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://packetstormsecurity.com/files/128852/WordPress-Download-Manager-Arbitrary-File-Download.html

Exploit

http://www.securityfocus.com/bid/70764

https://exchange.xforce.ibmcloud.com/vulnerabilities/98318

https://nvd.nist.gov/vuln/detail/CVE-2014-8585

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8585

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8585

EUVD