The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by leveraging failure to sufficiently limit queries, as demonstrated by use of LOAD_FILE in an INSERT statement.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-01-05T16:00:00
Updated: 2024-08-06T13:18:47.515Z
Reserved: 2014-10-20T00:00:00
Link: CVE-2014-8336
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-01-05T16:29:00.277
Modified: 2024-11-21T02:18:53.933
Link: CVE-2014-8336
Redhat
No data.