|
Description
|
|
(#Several vulnerabilities have been identified in the following WordPress themes:#- Javo Spot Premium: directory traversal via an AJAX request#- Dance Studio: arbitrary file inclusion.##Proofs of concept are available.)
|
|
|
|
|
|
Vulnerable Products
|
|
Vulnerable Software:
WordPress (WordPress) -
|
|
|
|
|
|
Solution
|
|
No solution for the moment.
|
|
|
|
|
|
CVE
|
|
|
|
|
|
|
|
References
|
|
- CodeSeekah : Javo Themes Spot LFI Vulnerability
https://codeseekah.com/2017/02/09/javo-themes-spot-lfi-vulnerability/
- cxsecurity : Wordpress Themes dance studio 1.0.0 - Arbitrary Shell Upload vulnerbility
https://cxsecurity.com/issue/WLB-2017020123
|
|
|
|
|
|
Vulnerability Manager Detection
|
|
No
|
|
|
|
|
|
IPS Protection
|
|
|
|
|
|
|
