CVE-2018-19040 - The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI

Back Back to CVE browser

MEDIUM

The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI

Published Jan 31, 2019

5.3

MEDIUM

CVSS 3.0

EPSS 12.13%

Description

The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10758
Advisory
https://www.exploit-db.com/exploits/45809/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10758		Advisory
https://www.exploit-db.com/exploits/45809/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry