Page Flip Image Gallery <= 0.2.2 - Directory Traversal
highThe Page Flip Image Gallery plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.2.2 via the 'book_id' parameter found in the getConfig.php file when magic_quotes_gpc is disabled. This makes it possible for attackers to read the contents of arbitrary files on the server, which c...
- CVSS:
- 7.5
- Affected:
- up to 0.2.2
- Fix:
- No patched version reported
- Disclosed:
- Dec 22, 2008