CVE

Id
69611  
CVE No.
CVE-2014-2316  
Status
Candidate  
Description
SQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20140307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
666160 69611 CVE-2014-2316 CONFIRM:http://wordpress.org/plugins/search-everything/changelog/  View
666161 69611 CVE-2014-2316 BID:65765  View
666162 69611 CVE-2014-2316 URL:http://www.securityfocus.com/bid/65765  View
666163 69611 CVE-2014-2316 SECUNIA:56820  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12830 JVNDB-2014-001705 lighttpd におけるディレクトリトラバーサルの脆弱性 lighttpd の (1) mod_evhost および (2) mod_simple_vhost には、request_check_hostname に関する処理に不備があるため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-2324 69611 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001705.html  View