PT-2017-10993 · WordPress+1 · Dtracker+1

Larry W. Cashdollar + 1 · Published 2017-09-14 · Updated 2019-10-03 · CVE-2017-1002004

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions DTracker version 1.5

Description The issue concerns a lack of input sanitization in the DTracker plugin for WordPress. Specifically, in the file ./dtracker/download.php, user input via the id variable is not properly sanitized before being added to an SQL query. This could potentially lead to SQL injection attacks.

Recommendations For DTracker version 1.5, consider modifying the download.php file to sanitize user input via the id variable before adding it to SQL queries to prevent potential SQL injection attacks. As a temporary workaround, restrict access to the download.php file until a proper fix is implemented.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-1002004

Affected Products

Dtracker

Wordpress

References · 5

• 🔥 http://vapidlabs.com/advisory.php?v=183 · Exploit
• https://osv.dev/vulnerability/CVE-2017-1002004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1002004 · Security Note
• https://wordpress.org/plugins/dtracker · Note
• http://securityfocus.com/bid/96781 · Note