CVE-2014-9014

Published: 2019-11-06T21:15Z

Last Modified: 2024-11-21T02:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. (dot dot) in the file parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt