Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2017-20248

WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download

Description

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests to asgallDownload.php with directory traversal sequences ../ to access sensitive files outside the intended directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apptha Apptha Slider Gallery

  • 1.0affected

References