CVE-2014-6242

EPSS 4.2%

Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby or (2) order parameter in the aiowpsec page to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/128419/All-In-One-WP-Security-3.8.2-SQL-Injection.htmlunverified cve_referencewww.exploit-db.com/exploits/34781unverified exploitdbwww.exploit-db.com/exploits/34781unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/128419/All-In-One-WP-Security-3.8.2-SQL-Injection.html https://exchange.xforce.ibmcloud.com/vulnerabilities/96204 https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog https://www.htbridge.com/advisory/HTB23231 http://www.exploit-db.com/exploits/34781 http://www.securityfocus.com/archive/1/533519/100/0/threaded http://www.securityfocus.com/bid/70150