CVE-2014-8604 in XCloner Plugin

Résumé

par MITRE

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration panel, which allows remote attackers to obtain sensitive information via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 04/11/2014
• Divulgation: 10/06/2015
• Modérer: accepté
• Entrée: VDB-75827
• CPE: prêt
• CWE: CWE-200 (confirmé)
• Exploitation: Télécharger
• CVSS: 5.0 (NVD)
• EPSS: 0.06926
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-8604
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8604
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-8604/