CVE

Id
81386  
CVE No.
CVE-2015-4109  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) data_target or (2) data_vote parameter in a rating_vote (wp_ajax_nopriv_rating_vote) action to wp-admin/admin-ajax.php.  
Phase
Assigned (20150528)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
732260 81386 CVE-2015-4109 BUGTRAQ:20150605 CVE-2015-4109 - WordPress Users Ultra Plugin [SQL injection]  View
732261 81386 CVE-2015-4109 URL:http://www.securityfocus.com/archive/1/archive/1/535690/100/0/threaded  View
732262 81386 CVE-2015-4109 MISC:http://packetstormsecurity.com/files/132181/WordPress-Users-Ultra-1.5.15-SQL-Injection.html  View
732263 81386 CVE-2015-4109 CONFIRM:https://wordpress.org/plugins/users-ultra/changelog/  View
732264 81386 CVE-2015-4109 BID:75052  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7609 JVNDB-2015-002929 SAP Afaria における重要な情報を取得される脆弱性 SAP Afaria は、不特定の機能へのアクセスを適切に制限しないため、重要な情報を取得される、権限を取得されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-4161 81386 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002929.html  View