PT-2014-8824 · Apptha · Apptha Wordpress Video Gallery

Publicado 2014-11-26 · Atualizado 2014-11-28 · CVE-2014-9097

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apptha WordPress Video Gallery (contus-video-gallery) plugin version 2.5

Description The issue concerns SQL injection vulnerabilities in the Apptha WordPress Video Gallery plugin. These vulnerabilities allow remote attackers to execute arbitrary SQL commands via the vid parameter in a "myextract" action to "wp-admin/admin-ajax.php". Additionally, remote authenticated users can execute arbitrary SQL commands via the playlistId parameter in the "newplaylist" page or the videoId parameter in a "newvideo" page to "wp-admin/admin.php".

Recommendations For Apptha WordPress Video Gallery (contus-video-gallery) plugin version 2.5, consider updating to a version released after 2014-07-23 to mitigate the risk of SQL injection attacks. As a temporary workaround, restrict access to the "wp-admin/admin-ajax.php" and "wp-admin/admin.php" endpoints to minimize the risk of exploitation. Avoid using the vid, playlistId, and videoId parameters in the affected pages until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-9097

Produtos afetados

Apptha Wordpress Video Gallery

Referências · 7

• 🔥 http://securityfocus.com/bid/68883 · Exploit
• 🔥 https://exploit-db.com/exploits/34161 · Exploit
• 🔥 http://packetstormsecurity.com/files/127611/WordPress-Video-Gallery-2.5-Cross-Site-Scripting-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/36058 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9097 · Nota de Segurança
• http://wordpress.org/plugins/contus-video-gallery/changelog · Aviso do Fabricante