CVE-2008-5752

Published: Dec 30, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.

Affected (8)

Products: Wordpress: Page Flip Image Gallery Plugin

1 product

Page Flip Image Gallery Plugin

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wordpress Page Flip Image Gallery Plugin	Up to 0.2.2
Wordpress Page Flip Image Gallery Plugin	Version 0.1.1
Wordpress Page Flip Image Gallery Plugin	Version 0.1.3
Wordpress Page Flip Image Gallery Plugin	Version 0.1.4
Wordpress Page Flip Image Gallery Plugin	Version 0.1.6
Wordpress Page Flip Image Gallery Plugin	Version 0.1
Wordpress Page Flip Image Gallery Plugin	Version 0.2.0
Wordpress Page Flip Image Gallery Plugin	Version 0.2.1

Running on/with	Platform Versions
Wordpress Wordpress	All versions

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (12)

http://osvdb.org/50902

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/33274

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4836

Source: cve@mitre.org

http://www.securityfocus.com/bid/32966

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/47568

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7543

Source: cve@mitre.org

http://osvdb.org/50902

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/33274

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/4836

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32966

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/47568

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7543

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.