Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WP-DBManager wp-config.php Arbitrary File Download - Vulnerability Database
WP Plugin Wp Dbmanager

WordPress Plugin WP-DBManager wp-config.php Arbitrary File Download

Medium
Reference: No Reference
Title: WordPress Plugin WP-DBManager wp-config.php Arbitrary File Download
Overview:

WordPress Plugin WP-DBManager is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. An attacker can exploit this issue to download the wp-config.php script. This may allow attacker to gain access to sensitive information which may aid in launching further attacks. WordPress Plugin WP-DBManager version 2.60 is vulnerable prior versions may also be affected.