PT-2017-6603 · Wp Easycart · Wp Easycart

Published 2017-10-06 · Updated 2017-11-01 · CVE-2015-2673

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WP EasyCart plugin versions 1.1.30 through 3.0.20

Description The issue allows remote attackers to gain administrator privileges and execute arbitrary code. This is achieved via the option name and option value parameters in the ec ajax update option and ec ajax clear all taxrates functions.

Recommendations For WP EasyCart plugin versions 1.1.30 through 3.0.20, consider disabling the ec ajax update option and ec ajax clear all taxrates functions in the inc/admin/admin ajax functions.php file until a patch is available. Restrict access to these functions to minimize the risk of exploitation. Avoid using the option name and option value parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-2673

Affected Products

Wp Easycart

References · 4

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wp_easycart_privilege_escalation.rb · Exploit
• 🔥 http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2673 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2673 · Note