PT-2017-7656 · WordPress · Eshop

Larry W. Cashdollar + 1 · Publicado 2017-01-23 · Atualizado 2017-01-26 · CVE-2016-0769

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eShop plugin version 6.3.14

Description The issue allows remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the view, mark, or change parameter. This is due to multiple SQL injection vulnerabilities in the eshop-orders.php file of the eShop plugin for WordPress.

Recommendations For version 6.3.14, consider disabling the delid, view, mark, and change parameters in the eshop-orders.php file as a temporary workaround until a patch is available. Restrict access to the eshop-orders.php file to minimize the risk of exploitation. Avoid using the delid, view, mark, and change parameters in the affected API endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2016-0769

Produtos afetados

Eshop

Referências · 5

• 🔥 http://vapid.dhs.org/advisory.php?v=160 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2016/02/02/3 · Exploit
• https://osv.dev/vulnerability/CVE-2016-0769 · Aviso do Fabricante
• http://securityfocus.com/bid/82347 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0769 · Nota de Segurança