PT-2018-10213 · WordPress · Pie Register

Manuel García Cárdenas · Publicado 2018-06-17 · Atualizado 2018-08-14 · CVE-2018-10969

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 3.0.10

Description The issue allows remote attackers to execute arbitrary SQL commands via the invitation codes grid, potentially leading to unauthorized data access or modification.

Recommendations For versions prior to 3.0.10, update to version 3.0.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the invitation codes grid until the update is applied.

Exploit

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-10969

Produtos afetados

Pie Register

Referências · 4

• 🔥 https://exploit-db.com/exploits/44867 · Exploit
• https://osv.dev/vulnerability/CVE-2018-10969 · Aviso do Fabricante
• https://wordpress.org/plugins/pie-register/#developers · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10969 · Nota de Segurança