PT-2021-15931 · WordPress · Responsive 3D Slider

Syed Sheeraz Ali · Published 2021-09-20 · Updated 2021-09-29 · CVE-2021-24398

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Responsive 3D Slider WordPress plugin versions 1.2 and earlier

Description The Add new scene functionality in the Responsive 3D Slider WordPress plugin uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time-based SQL injection and in the same function, the vulnerable parameter is passed twice, so if a time of 5 seconds is passed, it takes 10 seconds to return since the query is ran twice.

Recommendations For Responsive 3D Slider WordPress plugin versions 1.2 and earlier, consider disabling the Add new scene functionality until a patch is available to prevent SQL injection attacks. Restrict access to the id parameter in the affected function to minimize the risk of exploitation. Avoid using the id parameter in the affected SQL statement until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-24398

Affected Products

Responsive 3D Slider

References · 6

• 🔥 https://codevigilant.com/disclosure/2021/wp-plugin-morpheus-slider · Exploit
• 🔥 https://wpscan.com/vulnerability/e6fb2256-0214-4891-b4b7-e4371a1599a5 · Exploit
• https://osv.dev/vulnerability/CVE-2021-24398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24398 · Security Note
• https://t.me/cvenotify/21147 · Telegram Post
• https://t.me/cibsecurity/29090 · Telegram Post