CVE-2014-8802 in Genetechsolutions Pie Register
Zusammenfassung (Englisch)
The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.
Reservieren
13.11.2014
Veröffentlichung
23.01.2015
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 73749 | Genetechsolutions Pie Register User Account pie-register.php erweiterte Rechte | 264 | Proof-of-Concept | Offizieller Fix | CVE-2014-8802 |