PT-2017-12397 · WordPress · Etoile Ultimate Product Catalog

Ning1022 · Published 2017-08-02 · Updated 2017-08-03 · CVE-2017-12199

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Etoile Ultimate Product Catalog plugin version 4.2.11

Description The issue concerns SQL injection in the Etoile Ultimate Product Catalog plugin for WordPress. Specifically, the vulnerability is triggered by various POST actions in the wp-admin/admin-ajax.php endpoint, including catalogue update order list-item, video update order video-item, image update order list-item, tag group update order list item, category products update order category-product-item, custom fields update order field-item, categories update order category-item, subcategories update order subcategory-item, and tags update order tag-list-item.

Recommendations For Etoile Ultimate Product Catalog plugin version 4.2.11, update the plugin to a version that addresses the SQL injection issue, as using outdated versions poses a significant risk. As a temporary workaround, consider restricting access to the wp-admin/admin-ajax.php endpoint to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-12199

Affected Products

Etoile Ultimate Product Catalog

References · 3

• 🔥 https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-12199 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12199 · Vendor Advisory