PT-2017-6671 · WordPress · Wordpress Eshop Plugin

Publicado 2017-07-21 · Atualizado 2017-07-26 · CVE-2015-3421

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Wordpress Eshop plugin versions 6.3.11 and earlier

Description The issue concerns the eshop checkout function in the Wordpress Eshop plugin, which fails to validate variables in the "eshopcart" HTTP cookie. This allows remote attackers to perform cross-site scripting (XSS) attacks or disclose paths via crafted variables named after target PHP variables.

Recommendations For Wordpress Eshop plugin versions 6.3.11 and earlier, consider disabling the eshop checkout function in checkout.php until a patch is available. Restrict access to the "eshopcart" HTTP cookie to minimize the risk of exploitation. Avoid using crafted variables named after target PHP variables in the affected cookie until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-3421

Produtos afetados

Wordpress Eshop Plugin

Referências · 4

• http://securityfocus.com/bid/74477 · Nota
• https://htbridge.com/advisory/HTB23255 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3421 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-3421 · Nota de Segurança