PT-2015-5660 · Wonderplugin · Wonderplugin Audio Player

Kacper Szurek · Publicado 2015-03-03 · Atualizado 2015-03-04 · CVE-2015-2199

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WonderPlugin Audio Player plugin versions prior to 2.1

Description The issue allows remote authenticated users to execute arbitrary SQL commands via the item[id] parameter in a wonderplugin audio save item action to /wp-admin/admin-ajax.php or remote administrators to execute arbitrary SQL commands via the itemid parameter in the wonderplugin audio show item, wonderplugin audio show items, or wonderplugin audio edit item page to /wp-admin/admin.php.

Recommendations For WonderPlugin Audio Player plugin versions prior to 2.1, update to version 2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /wp-admin/admin-ajax.php and /wp-admin/admin.php API endpoints until the update is applied. Avoid using the item[id] and itemid parameters in the affected actions and pages until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2015-2199

Produtos afetados

Wonderplugin Audio Player

Referências · 8

• 🔥 http://security.szurek.pl/wonderplugin-audio-player-20-blind-sql-injection-and-xss.html · Exploit
• 🔥 https://exploit-db.com/exploits/36086 · Exploit
• 🔥 http://exploit-db.com/exploits/36086 · Exploit
• http://wonderplugin.com/wordpress-audio-player · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2199 · Nota de Segurança
• http://osvdb.org/show/osvdb/118508 · Nota
• http://osvdb.org/show/osvdb/118509 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2199 · Nota