Sign in
CVE-2015-9485
CVE-2015-9485
Description
The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
Impact
CVSS v3 : 7.5 HIGH
CVSS v2 : 5 MEDIUM
Type
CWE-200
Attack Vector
CVSSv2 Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N
Quick links
CVE
,
NVD
,
CERT
,
Metasploit
,
Exploit-db
,
Fulldisc
,
Bugtraq
,
Microsoft
,
Red Hat
,
Debian
, GitHub
code
/
issues
,
Google
References
https://packetstormsecurity.com/files/131957/
FAQ
Terms of service
Privacy policy