CVE-2016-20100: Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview
Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview() in mdocs-downloads.php to download wp-config.php containing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Memphis Documents Library WordPress Pluginto a version that resolves this vulnerability.Fixed in 3.1.6
Event History
Frequently Asked Questions
Who can exploit this issue?
Any unauthenticated remote attacker can exploit it by sending a crafted GET request. No WordPress account or user interaction is required.
What information could be exposed?
Attackers can read arbitrary files through traversal sequences in the mdocs-img-preview parameter. This can include wp-config.php, which may contain database credentials.
Which component should be checked during triage?
Check whether the Memphis Documents Library WordPress plugin is installed at a version earlier than 3.1.6. The vulnerable request reaches mdocs_img_preview() in mdocs-downloads.php.
Has this vulnerability been exploited in the wild?
Yes. The provided data states that the Shadowserver Foundation first observed exploitation evidence on 2023-10-22.