EUVD-2014-3135

Malware in sbrugna...

CVE-2014-3114

The EZPZ One Click Backup ezpz-one-click-backup plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php...

CVE-2014-3114

The EZPZ One Click Backup ezpz-one-click-backup plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php...

CVE-2014-3114

The CVE-2014-3114 entry concerns the EZPZ One Click Backup WordPress plugin (versions 12.03.10 and earlier). Affects the PHP script ezpz-archive-cmd.php, where the cmd parameter can be exploited to execute arbitrary commands, resulting in unauthenticated remote command execution. Multiple sources...

EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting (XSS)

The ezpz-one-click-backup WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

EZPZ One Click Backup <= 12.03.10 - Unauthenticated Command Execution

The ezpz-one-click-backup WordPress plugin was affected by an Unauthenticated Command Execution security vulnerability...

WordPress Plugin 'ezpz-one-click-backup' 'cmd' Parameter OS Code Execution Vulnerability

The ezpz-one-click-backup plugin for WordPress is prone to a remote code execution RCE vulnerability because it fails to properly validate user supplied input. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

WordPress EZPZ One Click Backup 12.03.10 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...