WordPress Comment Rating Plugin SQL Injection and Security Bypass Vulnerabilities

Bugtraq ID:	58201
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 21 2013 12:00AM
Updated:	Feb 21 2013 12:00AM
Credit:	ebanyu
Vulnerable:	WordPress Comment Rating 2.9.32
Not Vulnerable:

WordPress Comment Rating Plugin SQL Injection and Security Bypass Vulnerabilities

The Comment Rating plugin for WordPress is prone to an SQL-injection vulnerability and a security-bypass vulnerability.

Exploiting these issues could allow an attacker to bypass certain security restrictions and perform unauthorized actions, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Comment Rating 2.9.32 is vulnerable; other versions may also be affected.

WordPress Comment Rating Plugin SQL Injection and Security Bypass Vulnerabilities

An attacker can exploit this issue using a browser.

The following exploit code and example URI are available:

http://www.example.com/wordpress/wp-content/plugins/comment-rating/ck-processkarma.php

• /data/vulnerabilities/exploits/58201.php.txt

WordPress Comment Rating Plugin SQL Injection and Security Bypass Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

WordPress Comment Rating Plugin SQL Injection and Security Bypass Vulnerabilities

References:

• Comment Rating Homepage (Bob King)
  
• WordPress Homepage (WordPress)