CVE-2018-1000131

Опубликовано: 14 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site, without login. This vulnerability appears to have been fixed in 9.0.3 and later.

Ссылки

https://github.com/00theway/exp/blob/master/wordpress/wpsupportplus.md
Exploit
Third Party Advisory
https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
Release Notes
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9041
Third Party Advisory
https://github.com/00theway/exp/blob/master/wordpress/wpsupportplus.md
Exploit
Third Party Advisory
https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
Release Notes
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9041
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpsupportplus:wp_support_plus_responsive_ticket_system:*:*:*:*:*:wordpress:*:*

Версия до 9.0.2 (включая)

EPSS

Процентиль: 73%

0.00805

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-2fc8-f6cq-59vj