Lucene search
PRIOn knowledge basePRION:CVE-2014-8949HistoryNov 16, 2014 - 11:59 a.m.
Code injection
2014-11-1611:59:00
PRIOn knowledge base
www.prio-n.com
6
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4w_trace parameter. NOTE: this can be leveraged with CVE-2014-8948 to allow remote attackers to execute code. NOTE: it is not clear whether this issue itself crosses privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| imember360 | eq | 3.9.000 | |
| imember360 | eq | 3.9.001 | |
| imember360 | eq | 3.8.014 | |
| imember360 | eq | 3.8.012 | |
| imember360 | eq | 3.8.013 |
Related
nvd
nvd
CVE-2014-8949
2014-11-16 11:59:05
CVE-2014-8948
2014-11-16 11:59:04
cve
cve
CVE-2014-8949
2014-11-16 11:59:05
CVE-2014-8948
2014-11-16 11:59:04
cvelist
cvelist
CVE-2014-8949
2014-11-16 11:00:00
CVE-2014-8948
2014-11-16 11:00:00
wpvulndb
wpvulndb
iMember360 < 3.9.001 - Multiple Issues
2014-04-24 00:00:00
patchstack
patchstack
WordPress iMember360 Plugin <= 3.9.001 - Code Execution
2014-11-15 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-11-16 11:59:00