CVE-2014-3848

Currently unrated

Key Information:

Vendor
Wordpress
Status
Imember360
Vendor
CVE Published:
23 May 2014

Summary

The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to obtain database credentials via the i4w_dbinfo parameter.

References

http://packetstormsecurity.com/files/126324/WordPress-iMe...
x_refsource_MISC
http://www.exploit-db.com/exploits/33076
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/106298
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.