Wp-dbmanager Project

Wp-dbmanager

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2022-2354

Exploit
  • EPSS 0.77%
  • Published 15.08.2022 11:21:22
  • Last modified 21.11.2024 07:00:49

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.

7.8

CVE-2014-8335

Exploit
  • EPSS 0.11%
  • Published 05.01.2018 16:29:00
  • Last modified 21.11.2024 02:18:53

(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credentials on the mysqldump command line, which allows local users to obtain sensitive information by listing the pro...

6.5

CVE-2014-8336

Exploit
  • EPSS 1.23%
  • Published 05.01.2018 16:29:00
  • Last modified 21.11.2024 02:18:53

The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by leveraging failure to sufficiently limit queries, as demonstrated by use of LOAD_FILE in an INSERT s...

6.5

CVE-2014-8334

Exploit
  • EPSS 4.31%
  • Published 31.10.2014 14:55:10
  • Last modified 12.04.2025 10:46:40

The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) $backup['filepath'] (aka "Path to Backup:" field) or (2) $backup['mysqldumpp...