Source evidence

Security Flaw

PHPINFO Print · support · 2013-09-18T20:34:00+00:00

PHPINFO Print plugin evidence original source source API

questionsentiment

highseverity

0.82relevance

3replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

3 / 29 rows with source links

10.3% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

Julio Potier resolved

Hello The plugin contains a vulnerability [Details moderated] Thx to patch 😉 http://wordpress.org/plugins/phpinfo-print/ Never, EVER, post details like that on a public forum! Either contact the plugin developer privately or email plugins [at] wordpress [dot] org This is “only” a phpinfo, not a sql injection or a full exploit tutorial. The plugin is brand new, only 14 dl, keep calm and contact him Thanks Julio, Thanks for the feedback. I haven’t thought of possible vulnerabilities, basically because the plugin is very short. Please share the details to me if possible. You can use the email myname.mylastname @ (hotmail or gmail) (Sorry for the email confusion I will decide soon which email to set in the plugin readme.txt) Thanks –D

Commercial Context

Opportunity

admin and client-governance operations

Settings admin governance for keeping client admin areas controlled, understandable, and safe to maintain

Buyer: agencies, maintenance teams, and client-site operators

Wedge: audit settings admin changes, role drift, client handoffs, and unsafe settings exposure

Investigate Pain card complete market

Analysis

heuristic-v1

Summary: Security Flaw: users show security, compatibility pain that may indicate a product gap.

Evidence quote: Security Flaw Hello The plugin contains a vulnerability [Details moderated] Thx to patch 😉 http://wordpress.org/plugins/phpinfo-print/ Hello The plugin contains a vulnerability [Details moderated] Thx to patch 😉 http://wordpress.org/plugins/phpinfo-print/ Never, EVER, post details like that on a public forum!

Affected feature: email

security compatibility email

Plugin

API

PHPINFO Print

10 active installs · 8.4K downloads · rating 100.0

hosting data phpinfo() settings webserver

Comments

3 shown

esmi 2013-09-18T20:41:00+00:00

Never, EVER, post details like that on a public forum! Either contact the plugin developer privately or email plugins [at] wordpress [dot] org

Julio Potier 2013-09-18T20:51:00+00:00

This is “only” a phpinfo, not a sql injection or a full exploit tutorial. The plugin is brand new, only 14 dl, keep calm and contact him Thanks

Dejan Batanjac 2013-09-26T11:13:00+00:00

Julio, Thanks for the feedback. I haven’t thought of possible vulnerabilities, basically because the plugin is very short. Please share the details to me if possible. You can use the email myname.mylastname @ (hotmail or gmail) (Sorry for the email confusion I will decide soon which email to set in the plugin readme.txt) Thanks –D