Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-1408
HistoryMar 24, 2014 - 4:43 p.m.

CVE-2013-1408

2014-03-2416:43:02
CWE-89
[email protected]
web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.3%

JSON

Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search or (2) orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.

Affected configurations

NVD
Node
wysija_newsletters_projectwysija_newslettersRange≤2.2wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.1wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.2wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.3wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.4wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.5wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.6wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.7wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.8wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.9wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.0.9.5wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.1wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.2wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.3wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.4wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.5wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.6wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.7wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.8wordpress
OR
wysija_newsletters_projectwysija_newslettersMatch2.1.9wordpress

Related

zdt 1
cve 1
securityvulns 2
htbridge 1
seebug 1
prion 1
packetstorm 1
cvelist 1
zdt
zdt
WordPress Wysija Newsletters 2.2 SQL Injection Vulnerability
2013-02-07 00:00:00
cve
cve
CVE-2013-1408
2014-03-24 16:43:02
securityvulns
securityvulns
SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin
2013-02-11 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-02-11 00:00:00
htbridge
htbridge
SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin
2013-01-16 00:00:00
seebug
seebug
Conceptronic C54APM默认管理验证凭据漏洞
2014-01-13 00:00:00
prion
prion
Sql injection
2014-03-24 16:43:00
packetstorm
packetstorm
WordPress Wysija Newsletters 2.2 SQL Injection
2013-02-06 00:00:00
cvelist
cvelist
CVE-2013-1408
2014-03-24 14:00:00

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.3%

JSON
Related for NVD:CVE-2013-1408
zdt1cve1securityvulns2htbridge1seebug1prion1packetstorm1cvelist1