PT-2015-4052 · Automattic+2 · Wordpress+2

Larry W. Cashdollar + 1 · Published 2015-06-10 · Updated 2015-06-11 · CVE-2014-8606

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions XCloner plugin version 3.1.1 for WordPress XCloner plugin version 3.5.1 for Joomla!

Description A directory traversal issue exists, allowing remote administrators to read arbitrary files. This is achieved by using a .. (dot dot) in the file parameter within a json return action in the xcloner show page to the "wp-admin/admin-ajax.php" endpoint.

Recommendations For XCloner plugin version 3.1.1 for WordPress, update to a version that addresses this issue. For XCloner plugin version 3.5.1 for Joomla!, update to a version that addresses this issue. As a temporary workaround, consider restricting access to the xcloner show page and the wp-admin/admin-ajax.php endpoint to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-8606

Affected Products

Joomla!

Wordpress

Xcloner

References · 5

• 🔥 https://exploit-db.com/exploits/35212 · Exploit
• 🔥 http://vapid.dhs.org/advisory.php?v=110 · Exploit
• 🔥 http://vapid.dhs.org/advisories/wordpress/plugins/Xcloner-v3.1.1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8606 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8606 · Note