CVE-2014-8607

published 2015-06-10

CVE-2014-8607: The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain…

Priority P4 12 low 2.1 CVSS 2.0

AV L AC L Au N C P I N A N

EXPLOIT

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
xcloner	xcloner	—	—
xcloner	xcloner	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200