NVD

Id
23320  
Name
CVE-2015-0894  
Description
SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-06  
Modified Date
2015-03-09  
Seq
2015-0894  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
123796 23320 CVE-2015-0894 JVN#30832515  View
123797 23320 CVE-2015-0894 JVNDB-2015-000037  View
123798 23320 CVE-2015-0894 https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5530 JVNDB-2015-000037 WordPress 用プラグイン All In One WP Security & Firewall における SQL インジェクションの脆弱性 All In One WP Security & Firewall は、WordPress 用のセキュリティプラグインです。All In One WP Security & Firewall には、SQL インジェクションの脆弱性 (CWE-89) が存在します。 CVE-2015-0894 78105 CVE-2015-0894 23320 5.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000037.html 2015-03-06 2015-03-11 View