WordPress Pie Register Plugin Privilege Escalation and SQL Injection Vulnerabilities
BID:74458
Info
WordPress Pie Register Plugin Privilege Escalation and SQL Injection Vulnerabilities
| Bugtraq ID: | 74458 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 04 2015 12:00AM |
| Updated: | May 04 2015 12:00AM |
| Credit: | James Hooker |
| Vulnerable: |
Genetechsolutions Pie-Register 2.0.15 Genetechsolutions Pie-Register 2.0.14 |
| Not Vulnerable: | |
Discussion
WordPress Pie Register Plugin Privilege Escalation and SQL Injection Vulnerabilities
The Pie Register plugin for WordPress is prone to a privilege-escalation vulnerability and multiple SQL-injection vulnerabilities.
An attacker can leverage these issues to gain elevated privileges and to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
The Pie Register plugin for WordPress is prone to a privilege-escalation vulnerability and multiple SQL-injection vulnerabilities.
An attacker can leverage these issues to gain elevated privileges and to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
References
WordPress Pie Register Plugin Privilege Escalation and SQL Injection Vulnerabilities
References:
References:
- Pie Register 2.0.14-2.0.15, Privilege Escalation (James Hooker)
- Pie Register 2.0.14-2.0.15, SQL Injection (James Hooker)
- WordPress Pie Register Plugin - Homepage (WordPress)