vendor:
XCloner Wordpress/Joomla! backup Plugin
by:
Larry W. Cashdollar
8,8
CVSS
HIGH
Arbitrary command execution
78
CWE
Product Name: XCloner Wordpress/Joomla! backup Plugin
Affected Version From: 3.1.1 (Wordpress) v3.5.1 (Joomla!)
Affected Version To: 3.1.1 (Wordpress) v3.5.1 (Joomla!)
Patch Exists: YES
Related CWE: Requested, TDB.
CPE: a:xcloner:xcloner
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Wordpress, Joomla!
2014
XCloner WordPress/Joomla! backup Plugin v3.1.1 (WordPress) v3.5.1 (Joomla!) Vulnerabilities
Plugin allows arbitrary commands to be executed by an authenticated user. The user will require administrative access rights to backup the database. User input when specifying your own file name is not sanitized as well as various other input fields. All user configurable variables are vulnerable, these variables need to be sanitized before being passed to the exec() function for execution.
Mitigation:
Sanitize user input before passing it to the exec() function for execution.
