NVD

Id
33072  
Name
CVE-2014-5389  
Description
SQL injection vulnerability in content-audit-schedule.php in the Content Audit plugin before 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "Audited content types" option in the content-audit page to wp-admin/options-general.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-06  
Modified Date
2015-11-02  
Seq
2014-5389  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173515 33072 CVE-2014-5389 http://packetstormsecurity.com/files/128525/WordPress-Content-Audit-1.6-Blind-SQL-Injection.html  View
173516 33072 CVE-2014-5389 20141001 Blind SQLi vulnerability in Content Audit could allow a privileged attacker to exfiltrate password hashes (WordPress plugin)  View
173517 33072 CVE-2014-5389 70214  View
173518 33072 CVE-2014-5389 https://security.dxw.com/advisories/blind-sqli-vulnerability-in-content-audit-could-allow-a-privileged-attacker-to-exfiltrate-password-hashes/  View
173519 33072 CVE-2014-5389 https://wordpress.org/plugins/content-audit/changelog  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15691 JVNDB-2014-004566 WordPress 用 Content Audit プラグインの content-audit-schedule.php における SQL インジェクションの脆弱性 WordPress 用 Content Audit プラグインの content-audit-schedule.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-5389 72678 CVE-2014-5389 33072 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004566.html 2014-09-24 2014-10-08 View