CVE-2020-24144

July 10, 2021

Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.

Summary:

Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.

Reference Links(if available):

  • https://ru.wordpress.org/plugins/media-file-organizer/
  • https://github.com/secwx/research/blob/main/cve/CVE-2020-24144.md

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • Tags: , , , ,

    You may have missed

    image

    CVE Alert: CVE-2023-31280

    December 22, 2024
    image

    [FUNKSEC] – Ransomware Victim: visualsystemas[.]com[.]ar

    December 22, 2024
    image

    [FUNKSEC] – Ransomware Victim: casarom[.]com[.]ar

    December 22, 2024
    image

    [FUNKSEC] – Ransomware Victim: gtsportcarrental[.]com

    December 22, 2024
    image

    CVE Alert: CVE-2023-31279

    December 22, 2024