exploitDog

CVE-2017-14507

Опубликовано: 29 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) timeline parameter in content_timeline_class.php; or the id parameter to (2) pages/content_timeline_edit.php or (3) pages/content_timeline_index.php.

Ссылки

https://wpvulndb.com/vulnerabilities/8921
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42794/
Exploit
Third Party Advisory
VDB Entry
https://wpvulndb.com/vulnerabilities/8921
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42794/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:shindiristudio:content_timeline:4.4.2:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 92%

0.07947

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-m2cm-qxmx-chc2

CVSS3: 9.8

github

больше 3 лет назад

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) timeline parameter in content_timeline_class.php; or the id parameter to (2) pages/content_timeline_edit.php or (3) pages/content_timeline_index.php.

EPSS

Процентиль: 92%

0.07947

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89