Unscored CVE-2014-3114 EUVD-2014-3135GHSA-wqjh-r42m-c49p

The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary co…

Published Apr 10, 2018 · Updated Aug 6, 2024 · Assigned by mitre

Description

The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php.

References

[oss-security] 20140501 CVE-2014-3114 WordPress plugin ezpz-one-click-backup cmd parameter os command injection mailing-list