CVE-2014-8336

The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by…

published January 5, 2018

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by leveraging failure to sufficiently limit queries, as demonstrated by use of LOAD_FILE in an INSERT statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02597 · 85.1th percentile
Published
2018-01-05T16:00Z
EPSS history
Timeline
  • 05 JAN 16:00Z
    The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by…
    cvelistv5