A Page Flip Book < 3.0 - Directory Traversal
criticalDirectory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pageflipbook_language parameter.
- CVSS:
- 9.8
- Affected:
- up to 3.0
- Fixed in:
- 3.0
- Disclosed:
- Jul 10, 2012