CVEvulnerability

CVE-2014-8607

2.1 LOW Published 2015-06-10 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-06-10
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-200

Description

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command.

Affected configurations

• xcloner xcloner 3.1.1 • xcloner xcloner 3.5.1

Weakness · CWE (1)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References

http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ Exploit
http://www.vapid.dhs.org/advisory.php?v=110 Exploit
http://www.vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1/ Exploit
http://www.vapid.dhs.org/advisory.php?v=110 Exploit

CVE-2014-8607

Description

Affected configurations

Related

Weakness · CWE (1)

References