WordPress Plugin Vulnerabilities

Tera Charts 0.1 - charts/zoomabletreemap.php fn Parameter Remote Path Traversal File Disclosure

Description

The tera-charts WordPress plugin was affected by a charts/zoomabletreemap.php fn Parameter Remote Path Traversal File Disclosure security vulnerability.

Affects Plugins

Plugin icon
tera-charts
Fixed in 1.0

References

CVE
CVE-2014-4940
URL
https://codevigilant.com/disclosure/wp-plugin-tera-chart-local-file-inclusion/

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
412c3bbc-a1d6-4fd3-8df5-736eb70cdea0

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Search N Save - SearchNSave/error_log Direct Request Path Disclosure
Published
2014-08-01
Title
AntiVirus 1.0 - uninstall.php Direct Request Path Disclosure
Published
2014-08-01
Title
grou-r&om-image-widget - Full Path Disclosure
Published
2014-11-27
Title
HTML5 MP3 Player with Playlist < 2.8.0 - Full Path Disclosure (FPD)
Published
2014-08-01
Title
Feather12 - Multiple Script Direct Request Path Disclosure