Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-24862
HistoryJan 10, 2022 - 4:15 p.m.

CVE-2021-24862

2022-01-1016:15:08
CWE-89
[email protected]
web.nvd.nist.gov
7
registrationmagic
wordpress
sql injection

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.765

Percentile

98.3%

JSON

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

Affected configurations

Nvd
Node
metagaussregistrationmagicRange<5.0.1.6wordpress
VendorProductVersionCPE
metagaussregistrationmagic*cpe:2.3:a:metagauss:registrationmagic:*:*:*:*:*:wordpress:*:*

Related

zdt 1
cnvd 1
packetstorm 2
patchstack 1
nuclei 1
cvelist 1
cve 1
prion 1
exploitdb 1
metasploit 1
rapid7blog 1
zdt
zdt
WordPress RegistrationMagic V 5.0.1.5 Plugin- SQL Injection Exploit
2022-01-27 00:00:00
cnvd
cnvd
WordPress RegistrationMagic plugin SQL injection vulnerability
2022-01-14 00:00:00
packetstorm
packetstorm
WordPress RegistrationMagic V 5.0.1.5 SQL Injection
2022-01-27 00:00:00
Wordpress RegistrationMagic Task_ids Authenticated SQL Injection
2024-09-01 00:00:00
patchstack
patchstack
WordPress RegistrationMagic plugin <= 5.0.1.5 - SQL Injection (SQLi) vulnerability
2021-12-08 00:00:00
nuclei
nuclei
WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection
2023-03-18 22:07:09
cvelist
cvelist
CVE-2021-24862 RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
2022-01-10 15:30:30
cve
cve
CVE-2021-24862
2022-01-10 16:15:08
prion
prion
Sql injection
2022-01-10 16:15:00
exploitdb
exploitdb
WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated)
2022-01-27 00:00:00
metasploit
metasploit
Wordpress RegistrationMagic task_ids Authenticated SQLi
2022-01-30 21:08:06
rapid7blog
rapid7blog
Metasploit Wrap-Up
2022-02-04 19:54:30

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.765

Percentile

98.3%

JSON
Related for NVD:CVE-2021-24862
zdt1cnvd1packetstorm2patchstack1nuclei1cvelist1cve1prion1exploitdb1metasploit1rapid7blog1