PT-2014-6321 · WordPress · Yawpp

Anantshri · Published 2014-08-06 · Updated 2014-08-07 · CVE-2014-5182

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions yawpp plugin version 1.2

Description The issue allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands. This can be achieved via vectors related to admin functions.php or admin update.php. For example, the id parameter in the update action to "wp-admin/admin.php" is vulnerable.

Recommendations For yawpp plugin version 1.2, consider disabling the vulnerable id parameter in the update action to "wp-admin/admin.php" until a patch is available. Restrict access to admin functions.php and admin update.php to minimize the risk of exploitation. Avoid using the id parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-5182

Affected Products

Yawpp

References · 5

• 🔥 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=834445%40yawpp&old=824042%40yawpp&sfp_email=&sfph_mail=#file36 · Exploit
• 🔥 http://codevigilant.com/disclosure/wp-plugin-yawpp-a1-injection · Exploit
• http://wordpress.org/plugins/yawpp/changelog · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-5182 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5182 · Note