Lucene search
HistoryJan 13, 2015 - 11:59 a.m.
CVE-2014-10017
cve-2014-10017
sql injection
welcart
e-commerce
wordpress
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.2%
Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in the usces_itemedit page to wp-admin/admin.php.
Affected configurations
Node
welcarte-commerceMatch1.3.12wordpress
| CPE | Name | Operator | Version |
|---|---|---|---|
| welcart:e-commerce | welcart e-commerce | eq | 1.3.12 |
Related
prion
prion
Sql injection
2015-01-13 11:59:00
wpvulndb
wpvulndb
Welcart e-Commerce 1.3.12 - SQL Injection
2014-08-01 00:00:00
cvelist
cvelist
CVE-2014-10017
2015-01-13 11:00:00
patchstack
patchstack
WordPress Welcart e-Commerce Plugin <= 1.3.12 - Multiple SQL Injection
2015-01-13 00:00:00
nvd
nvd
CVE-2014-10017
2015-01-13 11:59:25
jvn
jvn
JVN#92828286: Welcart vulnerable to SQL injection
2015-07-24 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.2%
Related for CVE-2014-10017