CVE-2015-7669: Path Traversal
Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7669?
CVE-2015-7669 is classified as a high severity vulnerability due to its potential to allow arbitrary file inclusion and remote code execution.
How do I fix CVE-2015-7669?
To fix CVE-2015-7669, update the Easy2Map plugin to version 1.3.0 or later.
What are the affected versions of CVE-2015-7669?
CVE-2015-7669 affects versions of the Easy2Map plugin prior to 1.3.0.
What type of attacks does CVE-2015-7669 allow?
CVE-2015-7669 allows remote attackers to perform directory traversal attacks through the csvfile parameter.
Which files are vulnerable in CVE-2015-7669?
The vulnerable files in CVE-2015-7669 are includes/MapImportCSV2.php and includes/MapImportCSV.php.