CVE-2015-1365

概要

参考情報

• osvdb.org/show/osvdb/117147
• packetstormsecurity.com/files/130017/WordPress-Pixarbay-Images-2.3-XSS-Bypass-Upload-Traversal.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/75 · Exploit
• exploit-db.com/exploits/35846 · Exploit
• openwall.com/lists/oss-security/2015/01/25/5
• securityfocus.com/archive/1/534505/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/100036
• plugins.trac.wordpress.org/changeset
• wordpress.org/plugins/pixabay-images/changelog · Patch
• mogwaisecurity.de/advisories/MSA-2015-01.txt · Exploit

pixabay images のその他の脆弱性

• CVE-2015-1376中 4.0pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated user…
• CVE-2015-1375高 7.5pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, whic…
• CVE-2015-1366中 4.3Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers…