NVD

Id
82612  
Name
CVE-2017-6096  
Description
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/view-list.php (Requires authentication to Wordpress admin) with the GET Parameter: filter_list.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-02-21  
Modified Date
2017-07-17  
Seq
2017-6096  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
407118 82612 CVE-2017-5593 http://openwall.com/lists/oss-security/2017/02/09/29  View
407119 82612 CVE-2017-5593 https://github.com/psi-im/iris/pull/47/commits/02e976d4426a1319a7af7d26d7aba9d8c6077570  View
407120 82612 CVE-2017-5593 https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/  View
407121 82612 CVE-2017-5593 https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf  View
407122 82612 CVE-2017-5593 http://openwall.com/lists/oss-security/2017/02/09/29  View
407123 82612 CVE-2017-5593 https://github.com/psi-im/iris/pull/47/commits/02e976d4426a1319a7af7d26d7aba9d8c6077570  View
407124 82612 CVE-2017-5593 https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/  View
407125 82612 CVE-2017-5593 https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf  View
408255 82612 CVE-2017-2359 95724  View
408256 82612 CVE-2017-2359 https://support.apple.com/HT207484  View
408257 82612 CVE-2017-2359 95724  View
408258 82612 CVE-2017-2359 https://support.apple.com/HT207484  View
408259 82612 CVE-2017-2359 95724  View
408260 82612 CVE-2017-2359 https://support.apple.com/HT207484  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65200 JVNDB-2017-001567 WordPress 用 Mail Masta プラグインの /inc/lists/view-list.php における SQL インジェクションの脆弱性 WordPress 用 Mail Masta (別名 mail-masta) プラグインの GET パラメータ filter_list を伴う /inc/lists/view-list.php (Wordpress admin の認証が要求されるページ) には、SQL インジェクションの脆弱性が存在します。 CVE-2017-6096 CVE-2017-6096 82612 6.5 7.2 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001567.html 2017-02-27 2017-03-02 View