(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credentials on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
Published at: January 05, 2018 at 04:29PM
View on website
New vulnerability on the NVD: CVE-2014-8335
Tag: government hack NVD security
No comments: