CVE-2014-3114 EZPZ One Click Backup <= 12.03.10 - Unauthenticated Command Injection
CriticalCVSS 9.8
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ezpz-one-click-backup project ezpz-one-click-backup | <= 12.03.10 | No fix listed |
| wordpress ezpz-one-click-backup(WordPress) | <= 12.03.10 | No fix listed |
References
- [oss-security] 20140501 CVE-2014-3114 WordPress plugin ezpz-one-click-backup cmd parameter os command injection mailing-list third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org