SNS Vulnerability

Wordpress Download Shortcode Plugin "file" Arbitrary File Disclosure Vulnerability

Description

A vulnerability has been discovered in the Download Shortcode plugin for WordPress, which can be exploited by malicious people to disclose sensitive information.
Input passed via "file" GET parameter to wp-content/plugins/download-shortcode/force-download.php is not properly verified before being used to read files. This can be exploited to disclose the contents of arbitrary files via directory traversal sequences.
The vulnerability is confirmed in version 0.1.

Vulnerable Products

Vulnerable Software:
Wordpress Download Shortcode Plugin 0.x

Solution

Update to version 0.2.1.

CVE

References

Vulnerability Manager Detection

IPS Protection

ASQ Engine alarm	Available Since
Misc : Directory traversal - parameter starting with ../	3.2.0
Directory traversal using ..\..	3.2.0
Directory traversal	3.2.0
Directory traversal backward root folder	3.2.0

Risk level

Moderate

Vulnerability First Public Report Date

2012-10-17

Target Type

Server

Possible exploit

Remote