CVE-2014-9520

概要

参考情報

• seclists.org/fulldisclosure/2014/Dec/43
• lifeforms.nl/20141210/infinitewp-vulnerabilities

infinitewp のその他の脆弱性

• CVE-2020-28642緊急 9.8In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote atta…
• CVE-2014-9521高 7.5Unrestricted file upload vulnerability in uploadScript.php in InfiniteWP Admin Panel before 2.4.4, when the allWPFiles query parameter is se…
• CVE-2014-9519高 7.5SQL injection vulnerability in login.php in InfiniteWP Admin Panel before 2.4.3 allows remote attackers to execute arbitrary SQL commands vi…