Imember360 · Imember360 · CVE-2014-8949
**Name of the Vulnerable Software and Affected Versions**
iMember360 plugin versions 3.8.012 through 3.9.001
**Description**
The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the `i4w trace` parameter. This can potentially be leveraged to allow remote attackers to execute code.
**Recommendations**
For iMember360 plugin versions 3.8.012 through 3.9.001, consider restricting access to the `i4w trace` parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the `i4w trace` parameter in the affected plugin until the issue is resolved.