CVE-2014-4942

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP-easycart
Vendor
CVE Published:
11 July 2014

Summary

The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function.

References

https://plugins.trac.wordpress.org/changeset?sfp_email=&s...
x_refsource_CONFIRM
http://codevigilant.com/disclosure/wp-plugin-wp-easycart-...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.