CVE-2015-7791

Опубликовано: 29 дек. 2015

Источник: nvd

CVSS3: 6.3

CVSS2: 6.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) search[column] or (2) switch parameter.

Ссылки

http://jvn.jp/en/jp/JVN43344629/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000200
Vendor Advisory
http://www.securityfocus.com/bid/79647
http://www.welcart.com/community/archives/76035
Vendor Advisory
https://wpvulndb.com/vulnerabilities/8356
http://jvn.jp/en/jp/JVN43344629/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000200
Vendor Advisory
http://www.securityfocus.com/bid/79647
http://www.welcart.com/community/archives/76035
Vendor Advisory
https://wpvulndb.com/vulnerabilities/8356

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:welcart:welcart_e-commerce:*:*:*:*:*:wordpress:*:*

Версия до 1.5.2 (включая)

EPSS

Процентиль: 60%

0.00394

Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-rfpc-x6fq-w55m