CVE-2014-8604 in XCloner Plugin

Riassunto

di MITRE

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration panel, which allows remote attackers to obtain sensitive information via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 04/11/2014
• Divulgazione: 10/06/2015
• Moderazione: accettato
• Voce: VDB-75827
• CPE: pronto
• CWE: CWE-200 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.0 (NVD)
• EPSS: 0.06926
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-8604
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8604
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-8604/