PT-2017-6603 · Wp Easycart · Wp Easycart

Publicado 2017-10-06 · Atualizado 2017-11-01 · CVE-2015-2673

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WP EasyCart plugin versions 1.1.30 through 3.0.20

Description The issue allows remote attackers to gain administrator privileges and execute arbitrary code. This is achieved via the option name and option value parameters in the ec ajax update option and ec ajax clear all taxrates functions.

Recommendations For WP EasyCart plugin versions 1.1.30 through 3.0.20, consider disabling the ec ajax update option and ec ajax clear all taxrates functions in the inc/admin/admin ajax functions.php file until a patch is available. Restrict access to these functions to minimize the risk of exploitation. Avoid using the option name and option value parameters in the affected API endpoints until the issue is resolved.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-2673

Produtos afetados

Wp Easycart

Referências · 4

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wp_easycart_privilege_escalation.rb · Exploit
• 🔥 http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2673 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2673 · Nota