Lucene search
High-Tech Bridge AdvisoryPATCHSTACK:03827C9A8FC8B9566C9E665CE22A5380HistoryMar 21, 2014 - 12:00 a.m.
WordPress XCloner Standalone Plugin <= 3.5 - Multiple CSRF
2014-03-2100:00:00
High-Tech Bridge Advisory
patchstack.com
7
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
Because of these multiple vulnerabilities, the attackers can hijack the authentication of administrators for requests that change the administrator password via the config task to index2.php.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xcloner standalone | le | 3.5 |
Related
securityvulns
securityvulns
Сross-Site Request Forgery (CSRF) in XCloner Standalone
2014-05-04 00:00:00
exploitpack
exploitpack
XCloner Standalone 3.5 - Cross-Site Request Forgery
2014-04-10 00:00:00
htbridge
htbridge
Сross-Site Request Forgery (CSRF) in XCloner Standalone
2014-03-14 00:00:00
zdt
zdt
XCloner Standalone 3.5 Cross Site Request Forgery Vulnerability
2014-04-10 00:00:00
packetstorm
packetstorm
XCloner Standalone 3.5 Cross Site Request Forgery
2014-04-09 00:00:00
seebug
seebug
XCloner Standalone跨站请求伪造漏洞
2014-04-17 00:00:00
cve
cve
CVE-2014-2996
2014-04-25 20:55:00
CVE-2014-2579
2014-04-25 20:55:00
cvelist
cvelist
CVE-2014-2996
2014-04-25 20:00:00
CVE-2014-2579
2014-04-25 20:00:00
wpvulndb
wpvulndb
XCloner - Backup and Restore < 3.1.1 - Multiple Actions CSRF
2014-08-01 00:00:00
prion
prion
Code injection
2014-04-25 20:55:00
Cross site request forgery (csrf)
2014-04-25 20:55:00
exploitdb
exploitdb
XCloner Standalone 3.5 - Cross-Site Request Forgery
2014-04-10 00:00:00
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
Related for PATCHSTACK:03827C9A8FC8B9566C9E665CE22A5380