← Volver a CVEs
CVE-2016-4905
N/ADescripcion
SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado5/22/2017
Ultima modificacion4/20/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
wp-olivecart:olivecartwp-olivecart:olivecartpro
Debilidades (CWE)
CWE-89
Referencias
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000210.html(vultures@jpcert.or.jp)
http://www.securityfocus.com/bid/93790(vultures@jpcert.or.jp)
http://www.wp-olivecart.com/news/20160925.html(vultures@jpcert.or.jp)
https://jvn.jp/en/jp/JVN14567604/index.html(vultures@jpcert.or.jp)
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000210.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/93790(af854a3a-2127-422b-91ae-364da2661108)
http://www.wp-olivecart.com/news/20160925.html(af854a3a-2127-422b-91ae-364da2661108)
https://jvn.jp/en/jp/JVN14567604/index.html(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.