CVE

Id
81891  
CVE No.
CVE-2015-4614  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2m_img_save_map_name action to wp-admin/admin-ajax.php and other unspecified vectors.  
Phase
Assigned (20150616)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
735131 81891 CVE-2015-4614 BUGTRAQ:20150702 SQL Injection in easy2map wordpress plugin v1.24  View
735132 81891 CVE-2015-4614 URL:http://www.securityfocus.com/archive/1/archive/1/535922/100/0/threaded  View
735133 81891 CVE-2015-4614 EXPLOIT-DB:37534  View
735134 81891 CVE-2015-4614 URL:https://www.exploit-db.com/exploits/37534/  View
735135 81891 CVE-2015-4614 FULLDISC:20150703 SQL Injection in easy2map wordpress plugin v1.24  View
735136 81891 CVE-2015-4614 URL:http://seclists.org/fulldisclosure/2015/Jul/18  View
735137 81891 CVE-2015-4614 MISC:http://www.vapid.dhs.org/advisory.php?v=131  View
735138 81891 CVE-2015-4614 CONFIRM:https://plugins.trac.wordpress.org/changeset/1191455/easy2map  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8752 JVNDB-2015-004072 Xceedium Xsuite の opm/read_sessionlog.php におけるディレクトリトラバーサルの脆弱性 Xceedium Xsuite の opm/read_sessionlog.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2015-4666 81891 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004072.html  View