PT-2017-10993 · WordPress+1 · Dtracker+1

Larry W. Cashdollar + 1 · Publicado 2017-09-14 · Atualizado 2019-10-03 · CVE-2017-1002004

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions DTracker version 1.5

Description The issue concerns a lack of input sanitization in the DTracker plugin for WordPress. Specifically, in the file ./dtracker/download.php, user input via the id variable is not properly sanitized before being added to an SQL query. This could potentially lead to SQL injection attacks.

Recommendations For DTracker version 1.5, consider modifying the download.php file to sanitize user input via the id variable before adding it to SQL queries to prevent potential SQL injection attacks. As a temporary workaround, restrict access to the download.php file until a proper fix is implemented.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-1002004

Produtos afetados

Dtracker

Wordpress

Referências · 5

• 🔥 http://vapidlabs.com/advisory.php?v=183 · Exploit
• https://osv.dev/vulnerability/CVE-2017-1002004 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1002004 · Nota de Segurança
• https://wordpress.org/plugins/dtracker · Nota
• http://securityfocus.com/bid/96781 · Nota