PT-2017-12397 · WordPress · Etoile Ultimate Product Catalog

Ning1022 · Publicado 2017-08-02 · Atualizado 2017-08-03 · CVE-2017-12199

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Etoile Ultimate Product Catalog plugin version 4.2.11

Description The issue concerns SQL injection in the Etoile Ultimate Product Catalog plugin for WordPress. Specifically, the vulnerability is triggered by various POST actions in the wp-admin/admin-ajax.php endpoint, including catalogue update order list-item, video update order video-item, image update order list-item, tag group update order list item, category products update order category-product-item, custom fields update order field-item, categories update order category-item, subcategories update order subcategory-item, and tags update order tag-list-item.

Recommendations For Etoile Ultimate Product Catalog plugin version 4.2.11, update the plugin to a version that addresses the SQL injection issue, as using outdated versions poses a significant risk. As a temporary workaround, consider restricting access to the wp-admin/admin-ajax.php endpoint to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-12199

Produtos afetados

Etoile Ultimate Product Catalog

Referências · 3

• 🔥 https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-12199 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-12199 · Aviso do Fabricante