mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 17:51:17 +00:00
245 lines
8.5 KiB
JSON
245 lines
8.5 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2016-10920",
|
||
|
|
"sourceIdentifier": "cve@mitre.org",
|
||
|
|
"published": "2019-08-22T13:15:11.950",
|
||
|
|
"lastModified": "2019-08-26T15:34:13.217",
|
||
|
|
"vulnStatus": "Analyzed",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"lang": "es",
|
||
|
|
"value": "El plugin gnucommerce versiones anteriores a 0.5.7-BETA para WordPress, presenta una vulnerabilidad de tipo XSS."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV30": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "3.0",
|
||
|
|
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
|
||
|
|
"attackVector": "NETWORK",
|
||
|
|
"attackComplexity": "LOW",
|
||
|
|
"privilegesRequired": "NONE",
|
||
|
|
"userInteraction": "REQUIRED",
|
||
|
|
"scope": "CHANGED",
|
||
|
|
"confidentialityImpact": "LOW",
|
||
|
|
"integrityImpact": "LOW",
|
||
|
|
"availabilityImpact": "NONE",
|
||
|
|
"baseScore": 6.1,
|
||
|
|
"baseSeverity": "MEDIUM"
|
||
|
|
},
|
||
|
|
"exploitabilityScore": 2.8,
|
||
|
|
"impactScore": 2.7
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
|
||
|
|
"accessVector": "NETWORK",
|
||
|
|
"accessComplexity": "MEDIUM",
|
||
|
|
"authentication": "NONE",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "PARTIAL",
|
||
|
|
"availabilityImpact": "NONE",
|
||
|
|
"baseScore": 4.3
|
||
|
|
},
|
||
|
|
"baseSeverity": "MEDIUM",
|
||
|
|
"exploitabilityScore": 8.6,
|
||
|
|
"impactScore": 2.9,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": false,
|
||
|
|
"userInteractionRequired": true
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-79"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.1:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "69CDAB57-5B59-41AA-9C58-EA76995BBD54"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.1.4:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "032B35A8-BC5A-46CD-AA1E-CEE22410E1E7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.1:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "E189BC25-974D-4CA1-828D-428011539A7E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.2:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "ED12379B-A13F-41A3-A821-27CEF541EA63"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.3:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "CEBE4B6F-9E7F-4313-BEBB-B55867E94578"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.4:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D9A492FB-F4D3-4C81-984A-365FFC47CF3F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.5:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "72E4D711-B243-4DC3-A643-FBFFB481D281"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.7:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "DB9A5830-D89F-443B-B951-F59A436F5927"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.8:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "655146D8-8A1A-4F6F-A516-91F4F3153EFF"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.9:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "A309F706-7711-4188-9AE6-BA5A07B6616A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.0:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "0F057645-1CEE-4F26-80E1-8D450F8CB911"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.1:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "34DDD493-98B0-4DFE-B4D0-F23840C85626"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.2:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "79A00050-8011-41C7-B1B1-6E15DFB977A7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.3:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D3659C65-6373-4A77-B141-5C154F3A343F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.4:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "9C0793FB-A234-4FB4-B557-CD821DE86019"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.6:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "ACAE00C5-C994-464F-AA4B-9E8D88C79236"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.7:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "FC0CC445-C100-40B6-9A8A-12D23BC566A3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.8:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "BBE8EC9B-D6F1-4510-AFAF-89205A3AB08F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.0:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "291DADD8-2D26-4723-B2FB-BF501DD75D74"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.1:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "F31065C8-356B-4ABA-9D9B-B243D15DAEB3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.2:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "9DD0AA5B-B83B-4A32-A9C5-7C80FA0770E6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.3:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1934C7B0-8A9C-4934-8494-228CE57CEC26"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.5:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "CD9DEE33-8327-46E7-A355-352148428092"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.6:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "74675FC9-C1A7-400B-A9B6-8600ED662625"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.0:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "2F592C6B-F987-45EB-A5C9-6D15DE048529"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.1:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EA25AC75-6638-4C2C-A559-ECEA80000FC1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.2:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D478CF23-F4D6-4793-BB3B-D485E7088E8F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.4:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "CF5198DB-1BDD-4CF9-90F7-FEFB2D76F77D"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.5:beta:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "AB57D462-3989-4051-A048-67BDA94EF91A"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "https://wordpress.org/plugins/gnucommerce/#developers",
|
||
|
|
"source": "cve@mitre.org",
|
||
|
|
"tags": [
|
||
|
|
"Release Notes",
|
||
|
|
"Third Party Advisory"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|