Lucene search
MitreCVE-2014-5183HistoryAug 06, 2014 - 7:55 p.m.
CVE-2014-5183
2014-08-0619:55:04
CWE-89
mitre
web.nvd.nist.gov
16
cve-2014-5183
sql injection
simple retail menus
wordpress
remote authenticated editors
nvd
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8.3
Confidence
Low
EPSS
0.001
Percentile
46.2%
SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php.
Affected configurations
Node
simple_retail_menus_plugin_projectsimple-retail-menusRange≤4.0.1wordpress
ORsimple_retail_menus_plugin_projectsimple-retail-menusMatch4.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| simple_retail_menus_plugin_project | simple-retail-menus | * | cpe:2.3:a:simple_retail_menus_plugin_project:simple-retail-menus:*:*:*:*:*:wordpress:*:* |
| simple_retail_menus_plugin_project | simple-retail-menus | 4.0 | cpe:2.3:a:simple_retail_menus_plugin_project:simple-retail-menus:4.0:*:*:*:*:wordpress:*:* |
Related
patchstack
patchstack
WordPress Simple Retail Menus Plugin <= 4.0 - SQL Injection
2014-08-06 00:00:00
prion
prion
Sql injection
2014-08-06 19:55:00
cvelist
cvelist
CVE-2014-5183
2014-08-06 19:00:00
wpvulndb
wpvulndb
nvd
nvd
CVE-2014-5183
2014-08-06 19:55:04
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8.3
Confidence
Low
EPSS
0.001
Percentile
46.2%
Related for CVE-2014-5183