The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.
                
            References
                    | Link | Resource | 
|---|---|
| https://mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit/ | Exploit Third Party Advisory | 
| https://wordpress.org/plugins/real3d-flipbook-lite/#developers | Release Notes Third Party Advisory | 
| https://mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit/ | Exploit Third Party Advisory | 
| https://wordpress.org/plugins/real3d-flipbook-lite/#developers | Release Notes Third Party Advisory | 
Configurations
                    History
                    No history.
Information
                Published : 2019-09-16 13:15
Updated : 2024-11-21 02:45
NVD link : CVE-2016-10965
Mitre link : CVE-2016-10965
CVE.ORG link : CVE-2016-10965
JSON object : View
Products Affected
                creativeinteractivemedia
- real3d_flipbook
 
CWE
                
                    
                        
                        CWE-22
                        
            Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
