PT-2014-8824 · Apptha · Apptha Wordpress Video Gallery

Published 2014-11-26 · Updated 2014-11-28 · CVE-2014-9097

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apptha WordPress Video Gallery (contus-video-gallery) plugin version 2.5

Description The issue concerns SQL injection vulnerabilities in the Apptha WordPress Video Gallery plugin. These vulnerabilities allow remote attackers to execute arbitrary SQL commands via the vid parameter in a "myextract" action to "wp-admin/admin-ajax.php". Additionally, remote authenticated users can execute arbitrary SQL commands via the playlistId parameter in the "newplaylist" page or the videoId parameter in a "newvideo" page to "wp-admin/admin.php".

Recommendations For Apptha WordPress Video Gallery (contus-video-gallery) plugin version 2.5, consider updating to a version released after 2014-07-23 to mitigate the risk of SQL injection attacks. As a temporary workaround, restrict access to the "wp-admin/admin-ajax.php" and "wp-admin/admin.php" endpoints to minimize the risk of exploitation. Avoid using the vid, playlistId, and videoId parameters in the affected pages until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-9097

Affected Products

Apptha Wordpress Video Gallery

References · 7

• 🔥 http://securityfocus.com/bid/68883 · Exploit
• 🔥 https://exploit-db.com/exploits/34161 · Exploit
• 🔥 http://packetstormsecurity.com/files/127611/WordPress-Video-Gallery-2.5-Cross-Site-Scripting-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/36058 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9097 · Security Note
• http://wordpress.org/plugins/contus-video-gallery/changelog · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9097 · Note