CVE-2017-6098
Mail Masta <= 1.0 - SQL Injection via list_id parameter
Severity Score
7.2
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign_save.php (Requires authentication to Wordpress admin) with the POST Parameter: list_id.
Se ha descubierto un problema de inyección SQL en el Mail Masta (también conocido como mail-masta) plugin 1.0 para WordPress. Esto afecta /inc/campaign_save.php (requiere autenticación al administrador de Wordpress) con el POST Parameter: list_id.
WordPress Mail Masta plugin version 1.0 suffers from a remote SQL injection vulnerability.
*Credits:
Hanley Shun
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-02-18 CVE Reserved
- 2017-02-18 CVE Published
- 2023-05-28 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
References (3)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/41438 | 2024-08-05 | |
https://github.com/hamkovic/Mail-Masta-Wordpress-Plugin | 2024-08-05 | |
https://wpvulndb.com/vulnerabilities/8740 | 2024-08-05 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Mail-masta Project Search vendor "Mail-masta Project" | Mail-masta Search vendor "Mail-masta Project" for product "Mail-masta" | 1.0 Search vendor "Mail-masta Project" for product "Mail-masta" and version "1.0" | wordpress |
Affected
|