estrutura-basica (All Known Versions) - Path Traversal
highThe estrutura-basica theme for WordPress is vulnerable to Directory Traversal in all known versions via the arquivo parameter found in the scripts/download.php file. This makes it possible for attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
- CVSS:
- 7.5
- Affected:
- up to *
- Fix:
- No patched version reported
- Disclosed:
- Sep 13, 2015