Plugin Name : bookx
Effected Version : 1.7 (and most probably lower version's if any)
Minimum Level of Access Required : Unauthenticated
PoC - (Proof of Concept) :
Vulerable Parameter : file
Vendor Contacted : 2014-02-19
Plugin Description :
BookX creates an easy way to give your site visitors a peek at your recommended books. Using only ISBN numbers, it gets the information from Barnes and Noble (http://www.bn.com) and stores the information locally to both speed up the response time, but also to not bog down their servers with repetetive requests. BookX creates a widget for your sidebar, a list view, and detail view, all customizable from the easy to use admin interface.