Lucene search

K
cve[email protected]CVE-2015-0894
HistoryMar 07, 2015 - 2:59 a.m.

CVE-2015-0894

2015-03-0702:59:01
CWE-89
web.nvd.nist.gov
23
cve-2015-0894
sql injection
all in one wp security
firewall plugin
wordpress
nvd

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%

SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD
Node
tips_and_tricks_hqall_in_one_wordpress_security_and_firewallRange3.8.7wordpress

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%