PT-2018-9608
CVE-2018-1002000
·
تاريخ النشر
2018-12-03
·
تاريخ التحديث
2018-12-27
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
WordPress Arigato Autoresponder and Newsletter version 2.5.1.8
Description:
The issue is related to a blind SQL injection vulnerability that can be exploited via the
del ids variable by sending a POST request. This vulnerability requires administrative privileges to exploit.Recommendations:
For WordPress Arigato Autoresponder and Newsletter version 2.5.1.8, consider restricting access to the
del ids variable to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the del ids variable in POST requests to prevent potential SQL injection attacks.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾