WordPress TheCartPress Plugin Multiple Security Vulnerabilities
BID:74395
Info
WordPress TheCartPress Plugin Multiple Security Vulnerabilities
| Bugtraq ID: | 74395 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-3301 CVE-2015-3300 CVE-2015-3302 CVE-2015-3986 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 08 2015 12:00AM |
| Updated: | Jul 15 2015 12:01AM |
| Credit: | High-Tech Bridge Security Research Lab |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
WordPress TheCartPress Plugin Multiple Security Vulnerabilities
The TheCartPress plugin for WordPress is prone to the following security vulnerabilities:
1. Multiple HTML-Injection vulnerabilities
2. An access-bypass vulnerability
3. Multiple cross-site scripting vulnerabilities
4. A local file-include vulnerability
Exploiting these vulnerabilities could allow an attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials, perform unauthorized actions and compromise the application, and to obtain potentially sensitive information and execute arbitrary local scripts.
The TheCartPress plugin for WordPress is prone to the following security vulnerabilities:
1. Multiple HTML-Injection vulnerabilities
2. An access-bypass vulnerability
3. Multiple cross-site scripting vulnerabilities
4. A local file-include vulnerability
Exploiting these vulnerabilities could allow an attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials, perform unauthorized actions and compromise the application, and to obtain potentially sensitive information and execute arbitrary local scripts.
Exploit / POC
WordPress TheCartPress Plugin Multiple Security Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Solution / Fix
WordPress TheCartPress Plugin Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
WordPress TheCartPress Plugin Multiple Security Vulnerabilities
References:
References:
- TheCartPress Download Page (Wordpress)