NVD

Id
40931  
Name
CVE-2013-5672  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add a testimonial via an iNIC_testimonial_save action; (2) add a listing template via an iNIC_testimonial_save_listing_template action; (3) add a widget template via an iNIC_testimonial_save_widget action; insert cross-site scripting (XSS) sequences via the (4) project_name, (5) project_url, (6) client_name, (7) client_city, (8) client_state, (9) description, (10) tags, (11) video_url, or (12) is_featured, (13) title, (14) widget_title, (15) no_of_testimonials, (16) filter_by_country, (17) filter_by_tags, or (18) widget_template parameter to wp-admin/admin-ajax.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-09-10  
Modified Date
2013-09-11  
Seq
2013-5672  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206910 40931 CVE-2013-5672 20130901 IndiaNIC Testimonail WP plugin - Multiple vulnerabilities  View
206911 40931 CVE-2013-5672 http://packetstormsecurity.com/files/123036  View
206912 40931 CVE-2013-5672 20130901 IndiaNIC Testimonial WP plugin - Multiple vulnerabilities  View
206913 40931 CVE-2013-5672 [oss-security] 20130901 Re: [CVE Request] IndiaNIC Testimonial 2.2 WP plugin  View
206914 40931 CVE-2013-5672 28054  View
206915 40931 CVE-2013-5672 62109  View
206916 40931 CVE-2013-5672 indianictestimonial-cve20135672-csrf(86846)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22446 JVNDB-2013-004021 WordPress 用 IndiaNIC Testimonial プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 WordPress 用 IndiaNIC Testimonial プラグインの wp-admin/admin-ajax.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-5672 65614 CVE-2013-5672 40931 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004021.html 2013-09-01 2013-09-12 View