Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress 路径遍历漏洞
Vulnerability Description
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。upgrade package uploader是其中的一个升级包上传组件。 WordPress 4.6.1之前的版本中的升级包主页上传器的wp-admin/includes/class-file-upload-upgrader.php文件的File_Upload_Upgrader类存在目录遍历漏洞。远程攻击者可借助特制‘urlholder’参数的利用该漏洞访问任意
CVSS Information
N/A
Vulnerability Type
N/A