NVD

Id
40932  
Name
CVE-2013-5673  
Description
SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testimonial_add action to wp-admin/admin-ajax.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-09-10  
Modified Date
2013-09-11  
Seq
2013-5673  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206917 40932 CVE-2013-5673 20130901 IndiaNIC Testimonail WP plugin - Multiple vulnerabilities  View
206918 40932 CVE-2013-5673 http://packetstormsecurity.com/files/123036  View
206919 40932 CVE-2013-5673 20130901 IndiaNIC Testimonial WP plugin - Multiple vulnerabilities  View
206920 40932 CVE-2013-5673 [oss-security] 20130901 Re: [CVE Request] IndiaNIC Testimonial 2.2 WP plugin  View
206921 40932 CVE-2013-5673 28054  View
206922 40932 CVE-2013-5673 62108  View
206923 40932 CVE-2013-5673 indianictestimon-cve20135673-sql-injection(86847)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22447 JVNDB-2013-004022 WordPress 用 IndiaNIC Testimonial プラグインにおける SQL インジェクションの脆弱性 WordPress 用 IndiaNIC Testimonial プラグインの testimonial.php には、SQL インジェクションの脆弱性が存在します。 CVE-2013-5673 65615 CVE-2013-5673 40932 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004022.html 2013-09-01 2013-09-12 View