WordPress All In One WP Security & Firewall Plugin Multiple SQL Injection Vulnerabilities

Bugtraq ID:	74257
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 21 2015 12:00AM
Updated:	Apr 21 2015 12:00AM
Credit:	Claudio Viviani
Vulnerable:	WordPress All In One WP Security & Firewall 3.9.0
Not Vulnerable:	WordPress All In One WP Security & Firewall 3.9.1

WordPress All In One WP Security & Firewall Plugin Multiple SQL Injection Vulnerabilities

All In One WP Security & Firewall plugin for WordPress is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

WordPress All In One WP Security & Firewall Plugin Multiple SQL Injection Vulnerabilities

An attacker can exploit these issues using a web browser.

The following example URI is available:

http://www.example.com/wp-admin/admin.php?page=aiowpsec&tab=tab3&orderby=user_id,(select * from (select(sleep(30)))a)&order=asc

WordPress All In One WP Security & Firewall Plugin Multiple SQL Injection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WordPress All In One WP Security & Firewall Plugin Multiple SQL Injection Vulnerabilities

References:

• All In One WP Security & Firewall Homepage (WordPress)
  
• WordPress All In One WP Security & Firewall Plugin - Changelog (WordPress)