CVE-2014-3848

概要

参考情報

• packetstormsecurity.com/files/126324/WordPress-iMember360is-3.9.001-XSS-Disclosure-Code-Execution.html · Exploit
• releases.imember360.com
• seclists.org/fulldisclosure/2014/Apr/265
• exploit-db.com/exploits/33076 · Exploit
• osvdb.org/106298

imember360 のその他の脆弱性

• CVE-2014-8949中 6.0The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via she…
• CVE-2014-8948中 6.8Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote attackers to hi…
• CVE-2014-3849中 4.3The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbit…
• CVE-2014-3842中 4.3Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to…