NVD

Id
24329  
Name
CVE-2015-2213  
Description
SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via a comment that is mishandled after retrieval from the trash.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-09  
Modified Date
2016-12-07  
Seq
2015-2213  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128789 24329 CVE-2015-2213 [oss-security] 20150804 Re: CVE request: WordPress 4.2.3 and earlier multiple vulnerabilities  View
128790 24329 CVE-2015-2213 DSA-3332  View
128791 24329 CVE-2015-2213 76160  View
128792 24329 CVE-2015-2213 https://codex.wordpress.org/Version_4.2.4  View
128793 24329 CVE-2015-2213 https://core.trac.wordpress.org/changeset/33555  View
128794 24329 CVE-2015-2213 https://core.trac.wordpress.org/changeset/33556  View
128795 24329 CVE-2015-2213 https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/  View
128796 24329 CVE-2015-2213 https://wpvulndb.com/vulnerabilities/8126  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10461 JVNDB-2015-005781 WordPress の wp-includes/post.php 内の wp_untrash_post_comments 関数における SQL インジェクションの脆弱性 WordPress の wp-includes/post.php 内の wp_untrash_post_comments 関数には、SQL インジェクションの脆弱性が存在します。 CVE-2015-2213 79438 CVE-2015-2213 24329 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005781.html 2015-08-04 2015-11-10 View