What is CVE-2014-8605?

CVE-2014-8605 is a vulnerability in Xcloner, classified under CWE-264. Published 2015-06-10.

Is CVE-2014-8605 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Xcloner

CVE-2014-8605

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to a backup file in administrators/backups/.

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

Affected products

Xcloner — versions 3.1.1, 3.5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-8605?: CVE-2014-8605 is a vulnerability in Xcloner, classified under CWE-264. Published 2015-06-10.
Is CVE-2014-8605 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.