PT-2014-5549
CVE-2014-3848
·
تاريخ النشر
2014-05-23
·
تاريخ التحديث
2014-05-27
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
iMember360 plugin versions prior to 3.9.001
Description
The issue allows remote attackers to obtain database credentials due to improper access restriction. This can be achieved via the
i4w dbinfo parameter.Recommendations
For versions prior to 3.9.001, update to version 3.9.001 or later to resolve the issue. As a temporary workaround, consider restricting access to the
i4w dbinfo parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾