Description
Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests to asgallDownload.php with directory traversal sequences ../ to access sensitive files outside the intended directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apptha | Apptha Slider Gallery | 1.0 | — |
References
- ExploitDB-41568 exploit
- Official Product Homepage product
- VulnCheck Advisory: WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download third-party-advisory