⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-4942

MEDIUM · 5.0 CVSS Gepubliceerd: 11-07-2014 CWE-200

Beschrijving

The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function.

Vendors

Levelfourdevelopment

Affected products

Wp-easycart

References

codevigilant.com
plugins.trac.wordpress.org