Lucene search
MitreCVELIST:CVE-2014-8949HistoryNov 16, 2014 - 11:00 a.m.
CVE-2014-8949
2014-11-1611:00:00
mitre
www.cve.org
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4w_trace parameter. NOTE: this can be leveraged with CVE-2014-8948 to allow remote attackers to execute code. NOTE: it is not clear whether this issue itself crosses privileges.
Related
nvd
nvd
CVE-2014-8949
2014-11-16 11:59:05
CVE-2014-8948
2014-11-16 11:59:04
cve
cve
CVE-2014-8949
2014-11-16 11:59:05
CVE-2014-8948
2014-11-16 11:59:04
prion
prion
Code injection
2014-11-16 11:59:00
Cross site request forgery (csrf)
2014-11-16 11:59:00
patchstack
patchstack
WordPress iMember360 Plugin <= 3.9.001 - Code Execution
2014-11-15 00:00:00
wpvulndb
wpvulndb
iMember360 < 3.9.001 - Multiple Issues
2014-04-24 00:00:00
cvelist
cvelist
CVE-2014-8948
2014-11-16 11:00:00