The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in the ~/bibtexbrowser.php file which allows attackers to include local zip files and achieve remote code execution, in versions up to and including 0.0.
Solution:
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
| Link | Tags |
|---|---|
| https://www.wordfence.com/vulnerability-advisories/#CVE-2021-38360 | third party advisory |
| https://plugins.trac.wordpress.org/browser/wp-publications/trunk/bibtexbrowser.php?rev=1830330#L49 | third party advisory |