CVE-2018-1002000

Опубликовано: 03 дек. 2018

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.

Ссылки

http://www.vapidlabs.com/advisory.php?v=203
Exploit
Third Party Advisory
https://wordpress.org/plugins/bft-autoresponder/
Product
https://www.exploit-db.com/exploits/45434/
Exploit
Third Party Advisory
VDB Entry
http://www.vapidlabs.com/advisory.php?v=203
Exploit
Third Party Advisory
https://wordpress.org/plugins/bft-autoresponder/
Product
https://www.exploit-db.com/exploits/45434/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kibokolabs:arigato_autoresponder_and_newsletter:2.5.1.8:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 89%

0.04786

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2018-1002000

CVSS3: 7.2

debian

около 7 лет назад

There is blind SQL injection in WordPress Arigato Autoresponder and Ne ...

GHSA-xhcp-hwcp-p5wq

CVSS3: 7.2

github

больше 3 лет назад

EPSS

Процентиль: 89%

0.04786

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89