CVE-2024-1071
100Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 9.8epss 89%
da publicação à arma0 dias
Publicada no NVD13 de mar.
1ª PoC27 de fev.
metasploit10 de fev.
VulnCheck23 de fev.
probabilidade de exploração
89%top 1% das CVEs
exploração observada
simVulnCheck
12 exploit(s) público(s)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ultimatemember · Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership PluginPoCs públicas encontradas — 12
githubgithub.com/gh-ost00/CVE-2024-1071-SQL-Injection★ 23githubgithub.com/gbrsh/CVE-2024-1071★ 8githubgithub.com/Trackflaw/CVE-2024-1071-Docker★ 3githubgithub.com/Spid3heX/CVE-2024-1071-PoC-Script★ 2githubgithub.com/dogucyber/WordPress-Exploit-CVE-2024-1071★ 2githubgithub.com/Matrexdz/CVE-2024-1071★ 1githubgithub.com/Matrexdz/CVE-2024-1071-Docker★ 1vulncheckvulncheck.com/xdb/89e59832aaf9não verificadovulncheckvulncheck.com/xdb/7b3d56bb30banão verificadovulncheckvulncheck.com/xdb/dbd5cb8c5febnão verificadovulncheckvulncheck.com/xdb/caa66bebe24fnão verificadovulncheckvulncheck.com/xdb/f94b209f4745não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.8.2/includes/core/class-member-directory-meta.php?rev=3022076https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.8.2/includes/core/class-member-directory-meta.php?rev=3022076#L666https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.8.2/includes/core/class-member-directory-meta.php?rev=3022076#L858https://plugins.trac.wordpress.org/changeset/3038036/ultimate-member/trunk/includes/core/class-member-directory-meta.phphttps://wordpress.org/plugins/ultimate-member/https://www.wordfence.com/threat-intel/vulnerabilities/id/005fa621-3c49-4c23-add5-d6b7a9110055?source=cve