CVE-2016-20064
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
6.2 / 10
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Description
WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting an unescaped parameter in the include functionality. Attackers can supply directory traversal sequences through the wpv-image GET parameter to access sensitive files like system configuration and credentials.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-98
Source
NVD
Vendor
myasui
Product
WP Vault
Discussion (0)
Add Comment
No comments yet. Be the first!