CVE

Id
79591  
CVE No.
CVE-2015-2314  
Status
Candidate  
Description
SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed.  
Phase
Assigned (20150317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
722580 79591 CVE-2015-2314 BUGTRAQ:20150312 WPML WordPress plug-in SQL injection etc.  View
722581 79591 CVE-2015-2314 URL:http://www.securityfocus.com/archive/1/archive/1/534862/100/0/threaded  View
722582 79591 CVE-2015-2314 FULLDISC:20150312 WPML WordPress plug-in SQL injection etc.  View
722583 79591 CVE-2015-2314 URL:http://seclists.org/fulldisclosure/2015/Mar/71  View
722584 79591 CVE-2015-2314 MISC:http://klikki.fi/adv/wpml.html  View
722585 79591 CVE-2015-2314 MISC:http://packetstormsecurity.com/files/130810/WordPress-WPML-XSS-Deletion-SQL-Injection.html  View
722586 79591 CVE-2015-2314 CONFIRM:http://wpml.org/2015/03/wpml-security-update-bug-and-fix/  View
722587 79591 CVE-2015-2314 OSVDB:119541  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8264 JVNDB-2015-003584 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys には、権限を取得される脆弱性が存在します。 CVE-2015-2366 79591 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003584.html  View