Lucene search
N/APATCHSTACK:BE281B8F3AA6E40CF4CC96C228667594HistoryOct 02, 2015 - 12:00 a.m.
WordPress Pie Register Plugin <= 2.0.18 - Multiple SQL Injection
2015-10-0200:00:00
N/A
patchstack.com
5
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
An SQL Injection exsist in pie-register/pie-register.php. It allows the administrators to execute arbitrary SQL commands via the 1. select_invitaion_code_bulk_option or 2. invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pie register | le | 2.0.18 |
Related
securityvulns
securityvulns
prion
prion
Sql injection
2015-10-16 20:59:00
packetstorm
packetstorm
WordPress Pie Register 2.0.18 SQL Injection
2015-10-12 00:00:00
wpvulndb
wpvulndb
Pie-Register <= 2.0.18 - Authenticated Blind SQL Injection
2015-10-12 00:00:00
cve
cve
CVE-2015-7682
2015-10-16 20:59:00
zdt
zdt
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
Related for PATCHSTACK:BE281B8F3AA6E40CF4CC96C228667594