Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAN6thH4XYHF8EMR6RLtqVEU39WcCxK32Tv9AGXSdKKraO=+z8g@mail.gmail.com>
Date: Sun, 21 Jun 2015 13:50:47 +0200
From: 0pc0deFR <0pc0defr@...il.com>
To: OSS Securty <oss-security@...ts.openwall.com>, cve-assign@...re.org
Cc: dr.abhishek_ghosh@...mail.com
Subject: Wordpress Plugin: FTP To Zip 1.8

Hello,

The FTP To Zip 1.8 wordpress plugin is vulnerable to unauthenticated
execution. With vulnerability, you can create a zip archive for Wordpress
install and you can download this archive (
http://domain.tld/wp-content/plugins/ftp-to-zip/backup.php).
A need CVE please.

Download plugin: https://downloads.wordpress.org/plugin/ftp-to-zip.1.8.zip

--
Cordialement,

Kévin FALCOZ alias 0pc0deFR - Consultant Expert WordPress -
http://wordpress-expertise.fr

--
Regards,

Kévin FALCOZ aka 0pc0deFR - WordPress Expert Consultant -
http://wordpress-expertise.fr

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.