NVD

Id
35594  
Name
CVE-2014-8586  
Description
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-04  
Modified Date
2014-11-10  
Seq
2014-8586  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182214 35594 CVE-2014-8586 http://packetstormsecurity.com/files/128814/WordPress-CP-Multi-View-Event-Calendar-1.01-SQL-Injection.html  View
182215 35594 CVE-2014-8586 35073  View
182216 35594 CVE-2014-8586 70718  View
182217 35594 CVE-2014-8586 cpmultiview-wordpress-calid-sql-injection(97766)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16342 JVNDB-2014-005217 WordPress 用 CP Multi View Event Calendar プラグインにおける SQL インジェクションの脆弱性 WordPress 用 CP Multi View Event Calendar プラグインには、SQL インジェクションの脆弱性が存在します。 CVE-2014-8586 75879 CVE-2014-8586 35594 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005217.html 2014-10-23 2014-11-06 View