CVE

Id
81430  
CVE No.
CVE-2015-4153  
Status
Candidate  
Description
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a load_template action to wp-admin/admin-ajax.php.  
Phase
Assigned (20150601)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
732451 81430 CVE-2015-4153 BUGTRAQ:20150604 CVE-2015-4153 - WordPress zM Ajax Login & Register Plugin [Local File Inclusion]  View
732452 81430 CVE-2015-4153 URL:http://www.securityfocus.com/archive/1/archive/1/535682/100/0/threaded  View
732453 81430 CVE-2015-4153 EXPLOIT-DB:37200  View
732454 81430 CVE-2015-4153 URL:https://www.exploit-db.com/exploits/37200/  View
732455 81430 CVE-2015-4153 MISC:http://packetstormsecurity.com/files/132172/WordPress-zM-Ajax-Login-Register-1.0.9-Local-File-Inclusion.html  View
732456 81430 CVE-2015-4153 CONFIRM:https://wordpress.org/plugins/zm-ajax-login-register/changelog/  View
732457 81430 CVE-2015-4153 GENTOO:GLSA-201512-10  View
732458 81430 CVE-2015-4153 URL:https://security.gentoo.org/glsa/201512-10  View
732459 81430 CVE-2015-4153 BID:75041  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7928 JVNDB-2015-003248 Cisco ASR 9000 デバイス上で稼動する Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 Cisco ASR 9000 デバイス上で稼動する Cisco IOS XR には、サービス運用妨害 (NPU チップのリセットまたはラインカードのリロード) 状態にされる脆弱性が存在します。 CVE-2015-4205 81430 5.7 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003248.html  View