WordPress Portable phpMyAdmin Plugin Multiple Security Bypass Vulnerabilities
BID:63249
CVE-2013-4454 | CVE-2013-4462 |Info
WordPress Portable phpMyAdmin Plugin Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 63249 |
| Class: | Design Error |
| CVE: |
CVE-2013-4454 CVE-2013-4462 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 21 2013 12:00AM |
| Updated: | Oct 24 2013 06:02AM |
| Credit: | Anant Shrivastava |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
WordPress Portable phpMyAdmin Plugin Multiple Security Bypass Vulnerabilities
The Portable phpMyAdmin plugin for WordPress is prone to multiple security-bypass vulnerabilities.
Successfully exploiting these issues may allow an attacker to bypass certain security restrictions and obtain sensitive information such as WordPress database username and password. This may aid in further attacks.
The Portable phpMyAdmin plugin for WordPress is prone to multiple security-bypass vulnerabilities.
Successfully exploiting these issues may allow an attacker to bypass certain security restrictions and obtain sensitive information such as WordPress database username and password. This may aid in further attacks.
Exploit / POC
WordPress Portable phpMyAdmin Plugin Multiple Security Bypass Vulnerabilities
An attacker can exploit these issues using a web browser or readily available tools.
An attacker can exploit these issues using a web browser or readily available tools.
Solution / Fix
WordPress Portable phpMyAdmin Plugin Multiple Security Bypass Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
WordPress Portable phpMyAdmin Plugin Multiple Security Bypass Vulnerabilities
References:
References: