PT-2014-6321 · WordPress · Yawpp

Anantshri · Publicado 2014-08-06 · Atualizado 2014-08-07 · CVE-2014-5182

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions yawpp plugin version 1.2

Description The issue allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands. This can be achieved via vectors related to admin functions.php or admin update.php. For example, the id parameter in the update action to "wp-admin/admin.php" is vulnerable.

Recommendations For yawpp plugin version 1.2, consider disabling the vulnerable id parameter in the update action to "wp-admin/admin.php" until a patch is available. Restrict access to admin functions.php and admin update.php to minimize the risk of exploitation. Avoid using the id parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-5182

Produtos afetados

Yawpp

Referências · 5

• 🔥 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=834445%40yawpp&old=824042%40yawpp&sfp_email=&sfph_mail=#file36 · Exploit
• 🔥 http://codevigilant.com/disclosure/wp-plugin-yawpp-a1-injection · Exploit
• http://wordpress.org/plugins/yawpp/changelog · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5182 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5182 · Nota de Segurança