PT-2017-7656 · WordPress · Eshop

Larry W. Cashdollar + 1 · Published 2017-01-23 · Updated 2017-01-26 · CVE-2016-0769

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eShop plugin version 6.3.14

Description The issue allows remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the view, mark, or change parameter. This is due to multiple SQL injection vulnerabilities in the eshop-orders.php file of the eShop plugin for WordPress.

Recommendations For version 6.3.14, consider disabling the delid, view, mark, and change parameters in the eshop-orders.php file as a temporary workaround until a patch is available. Restrict access to the eshop-orders.php file to minimize the risk of exploitation. Avoid using the delid, view, mark, and change parameters in the affected API endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2016-0769

Affected Products

Eshop

References · 5

• 🔥 http://vapid.dhs.org/advisory.php?v=160 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2016/02/02/3 · Exploit
• https://osv.dev/vulnerability/CVE-2016-0769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0769 · Security Note
• http://securityfocus.com/bid/82347 · Note