CVE-2015-4337

概要

参考情報

• packetstormsecurity.com/files/132107/WordPress-XCloner-3.1.2-XSS-Command-Execution.html · Exploit
• securityfocus.com/bid/74943
• vapid.dhs.org/advisory.php · Exploit

xcloner のその他の脆弱性

• CVE-2020-35950高 8.8An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).
• CVE-2020-35948高 8.8An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to…
• CVE-2020-13424中 6.5The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
• CVE-2015-4338中 6.5Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code…
• CVE-2015-4336中 6.5cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file co…