Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Tribulant Newsletters插件路径遍历漏洞
Vulnerability Description
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。Tribulant Newsletters plugin是使用在其中的一个全功能新闻简报插件。 WordPress Tribulant Newsletters插件4.6.19之前版本中的wp-admin/admin-ajax.php?action=newsletters_exportmultiple存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中
CVSS Information
N/A
Vulnerability Type
N/A