Published: 23/09/2017 Updated: 10/11/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress

Debian Bug report logs - #877629 wordpress: CVE-2017-14990 Package: src:wordpress; Maintainer for src:wordpress is Craig Small <csmall@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 3 Oct 2017 15:21:02 UTC Severity: important Tags: security, upstream Found in version wordpress/482+d ...

Debian Bug report logs - #876274 wordpress: 9 security bugs in wordpress 481 and earlier Package: src:wordpress; Maintainer for src:wordpress is Craig Small <csmall@debianorg>; Reported by: Craig Small <csmall@debianorg> Date: Wed, 20 Sep 2017 12:24:01 UTC Severity: grave Tags: security, upstream Found in versio ...

Several vulnerabilities were discovered in Wordpress, a web blogging tool They would allow remote attackers to exploit path-traversal issues, perform SQL injections and various cross-site scripting attacks For the oldstable distribution (jessie), these problems have been fixed in version 41+dfsg-1+deb8u15 For the stable distribution (stretch), ...

Analyse von vier Sicherheitslücken in Wordpress

Sicherheit von Wordpress In-depth analyse und Proof-Of-Concept Exploits der folgenden CVEs: SQL-Injection: CVE-2017-14723 XSS: CVE-2017-14718, CVE-2017-14721 Phar-Unserialisation: CVE-2018-20148 Dokumente Enthält das Whitepaper und die von uns genutzten Präsentationsslides POC Enthält die von uns bei den Livedemos benutzten Proof-Of-Concept Exploits

CWE-89 https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e https://medium.com/websec/wordpress-sqli-bbb2afcc8e94 https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48 https://core.trac.wordpress.org/changeset/41496 https://core.trac.wordpress.org/changeset/41470 http://www.securityfocus.com/bid/100912 http://www.securitytracker.com/id/1039553 https://www.debian.org/security/2017/dsa-3997 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877629 https://github.com/Byebyesky/IT-Security-Projekt https://www.debian.org/security/./dsa-3997

CVE-2017-14723

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect