CVE-2014-8948 | BDVDB-2026-66215 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote attackers to hijack the authentication of administrators for requests that with an unspecified impact via the i4w_trace parameter. NOTE: this can be leveraged with CVE-2014-8948 to execute arbitrary commands.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/58094
http://packetstormsecurity.com/files/126324/WordPress-iMember360is-3.9.001-XSS-Disclosure-Code-Execution.html
http://www.exploit-db.com/exploits/33076
http://osvdb.org/show/osvdb/106301
http://seclists.org/fulldisclosure/2014/Apr/265

Exploit#

http://www.exploit-db.com/exploits/33076

History#

Version 12014-11-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.