33 matches found
CVE-2014-3848
CVE-2014-3848 affects the WordPress plugin iMember360 before version 3.9.001. The root cause is improper access restrictions that allow remote attackers to obtain database credentials through the i4w_dbinfo parameter. Reported impact is disclosure of database credentials; no exploitation details ...
CVE-2014-3849
The CVE-2014-3849 issue affects WordPress with the iMember360 plugin versions 3.8.012–3.9.001. The vulnerability stems from improper access restriction that allows remote attackers to delete arbitrary users by sending a request that places a user name in the Email parameter and the API key in the...
WordPress iMember360 Plugin <= 3.9.001 - Arbitrary user deletion
Because of this vulnerability, the attackers can delete arbitrary users via a request containing a user name in the "Email" parameter and the API key in the "i4wclearuser" parameter. Solution Update the plugin...
WordPress iMember360 Plugin <= 3.9.001 - Disclosure of Database Credentials
Because of this vulnerability, the attackers can obtain database credentials via the "i4wdbinfo" parameter. Solution Update the plugin...
CVE-2014-3842
Multiple cross-site scripting XSS vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 decrypt or 2 encrypt parameter...
CVE-2014-3842
The CVE-2014-3842 entry concerns the WordPress plugin iMember360 (versions 3.8.012–3.9.001). Affected component: plugin logic handling the parameters named decrypt and encrypt . Root cause: cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HT...
CVE-2014-3842
Multiple cross-site scripting XSS vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 decrypt or 2 encrypt parameter...
Wordpress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities
Exploit for php platform in category web applications ------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's...
WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities
------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's second-to-none CRM and e-commerce engine." --...
WordPress Plugin iMember360 3.8.012 3.9.001 - Multiple Vulnerabilities
WordPress Plugin iMember360 3.8.012 3.9.001 - Multiple Vulnerabilities ------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by...
WordPress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities
WordPress iMember360 plugin is prone to multiple vulnerabilities, such as XSS, arbitrary user deletion, arbitrary code execution and disclosure of database credentials vulnerabilities. Solution Upgrade the plugin...
WordPress iMember360is 3.9.001 XSS / Disclosure / Code Execution
WordPress iMember360is plugin versions 3.8.012 through 3.9.001 suffers from arbitrary code execution, database credential disclosure, arbitrary user deletion, and cross site scripting vulnerabilities. ------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal...
