admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
cve/cves/2012/CVE-2012-20002.md
T
CVE-BOT 2f8797e3f4 Update CVE PoCs 2026-10-21
2026-10-21 07:55:22 +00:00

1.2 KiB
Raw Permalink Blame History

CVE-2012-20002

TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.php

Description

TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like ../../../../wp-config.php to retrieve database credentials and system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.

POC

Reference

Github

No PoCs found on GitHub currently.

Reference in new issue View Git Blame Copy Permalink