PictPress <= 0.91 - Directory Traversal
highMultiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) size or (2) path parameter.
- CVSS:
- 7.5
- Affected:
- up to 0.91
- Fixed in:
- 0.99
- Disclosed:
- Dec 5, 2007