Lucene search
PRIOn knowledge basePRION:CVE-2014-8948HistoryNov 16, 2014 - 11:59 a.m.
Cross site request forgery (csrf)
2014-11-1611:59:00
PRIOn knowledge base
www.prio-n.com
6
Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote attackers to hijack the authentication of administrators for requests that with an unspecified impact via the i4w_trace parameter. NOTE: this can be leveraged with CVE-2014-8948 to execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| imember360 | eq | 3.9.000 | |
| imember360 | eq | 3.9.001 | |
| imember360 | eq | 3.8.014 | |
| imember360 | eq | 3.8.012 | |
| imember360 | eq | 3.8.013 |
Related
cve
cve
CVE-2014-8948
2014-11-16 11:59:04
CVE-2014-8949
2014-11-16 11:59:05
nvd
nvd
CVE-2014-8948
2014-11-16 11:59:04
CVE-2014-8949
2014-11-16 11:59:05
cvelist
cvelist
CVE-2014-8948
2014-11-16 11:00:00
CVE-2014-8949
2014-11-16 11:00:00
prion
prion
Code injection
2014-11-16 11:59:00
wpvulndb
wpvulndb
iMember360 < 3.9.001 - Multiple Issues
2014-04-24 00:00:00