JobMonster < 4.6.6.1 - Directory Listing in Upload Folder

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the web server, vendors can also take measures to make it less likely to happen.

N/A

对路径名的限制不恰当(路径遍历)

WordPress和WordPress plugin 路径遍历漏洞

WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是WordPress开源的一个应用插件。 WordPress plugin JobMonster Theme存在路径遍历漏洞，该漏洞源于obMonster主题易受/wp content/uploads/JobMonster/文件夹中目录列表的攻击，因为它不包含默认的PHP文件。

N/A

N/A