CVEvulnerability

CVE-2014-8605

5.0 MEDIUM Published 2015-06-10 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-06-10
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-264

Description

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to a backup file in administrators/backups/.

Affected configurations

• xcloner xcloner 3.1.1 • xcloner xcloner 3.5.1

Weakness · not in database (1)

CWE-264

References

http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ Exploit
http://www.vapid.dhs.org/advisory.php?v=110 Exploit
http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ Exploit
http://www.vapid.dhs.org/advisory.php?v=110 Exploit

CVE-2014-8605

Description

Affected configurations

Related

Weakness · not in database (1)

References