CVE-2014-4942

WordPress EasyCart plugin before 2.0.6 expresses an information disclosure flaw. The vulnerability occurs in inc/admin/phpinfo.php, which directly calls phpinfo and allows remote attackers to obtain configuration details. Affected product: WP EasyCart plugin (WordPress) prior to version 2.0.6. Ro...