CVE-2014-4942 | BDVDB-2026-62647 Detail

Description#

The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=829290%40wp-easycart&old=827627%40wp-easycart&sfp_email=&sfph_mail=
http://codevigilant.com/disclosure/wp-plugin-wp-easycart-information-disclosure/

Exploit#

No public exploit known

History#

Version 12014-07-11Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.