mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
150 lines
6.6 KiB
JSON
150 lines
6.6 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2015-10100",
|
|
"ASSIGNER": "cna@vuldb.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress. This issue affects some unknown processing of the file classes/dynwid_class.php. The manipulation leads to sql injection. The attack may be initiated remotely. Upgrading to version 1.5.11 is able to address this issue. The identifier of the patch is d0a19c6efcdc86d7093b369bc9e29a0629e57795. It is recommended to upgrade the affected component. The identifier VDB-225353 was assigned to this vulnerability."
|
|
},
|
|
{
|
|
"lang": "deu",
|
|
"value": "Eine Schwachstelle wurde in Dynamic Widgets Plugin bis 1.5.10 f\u00fcr WordPress entdeckt. Sie wurde als kritisch eingestuft. Betroffen davon ist ein unbekannter Prozess der Datei classes/dynwid_class.php. Durch das Manipulieren mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Ein Aktualisieren auf die Version 1.5.11 vermag dieses Problem zu l\u00f6sen. Der Patch wird als d0a19c6efcdc86d7093b369bc9e29a0629e57795 bezeichnet. Als bestm\u00f6gliche Massnahme wird das Einspielen eines Upgrades empfohlen."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-89 SQL Injection",
|
|
"cweId": "CWE-89"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "n/a",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "Dynamic Widgets Plugin",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.2"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.4"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.5"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.6"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.7"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.8"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.9"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "1.5.10"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://vuldb.com/?id.225353",
|
|
"refsource": "MISC",
|
|
"name": "https://vuldb.com/?id.225353"
|
|
},
|
|
{
|
|
"url": "https://vuldb.com/?ctiid.225353",
|
|
"refsource": "MISC",
|
|
"name": "https://vuldb.com/?ctiid.225353"
|
|
},
|
|
{
|
|
"url": "https://github.com/wp-plugins/dynamic-widgets/commit/d0a19c6efcdc86d7093b369bc9e29a0629e57795",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/wp-plugins/dynamic-widgets/commit/d0a19c6efcdc86d7093b369bc9e29a0629e57795"
|
|
},
|
|
{
|
|
"url": "https://github.com/wp-plugins/dynamic-widgets/releases/tag/1.5.11",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/wp-plugins/dynamic-widgets/releases/tag/1.5.11"
|
|
}
|
|
]
|
|
},
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "VulDB GitHub Commit Analyzer"
|
|
}
|
|
],
|
|
"impact": {
|
|
"cvss": [
|
|
{
|
|
"version": "3.1",
|
|
"baseScore": 6.3,
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
{
|
|
"version": "3.0",
|
|
"baseScore": 6.3,
|
|
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
{
|
|
"version": "2.0",
|
|
"baseScore": 6.5,
|
|
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P"
|
|
}
|
|
]
|
|
}
|
|
} |