CVE-2014-2316: SQL Injection
Published Mar 7, 2014
·Updated
SQL injection vulnerability in sesearchdefault in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php. NOTE: some of these details are obtained from third party information.
Affected Software
4 affected components
Zemanta Search Everything Wordpress=7.0.2
WordPress WordPress
All of the following
Zemanta Search Everything Wordpress=7.0.2
WordPress WordPress
Event History
Mar 7, 2014
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Mar 9, 2014
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2316?
CVE-2014-2316 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2014-2316?
To fix CVE-2014-2316, you should upgrade the Search Everything plugin to version 7.0.3 or later.
3
Who is affected by CVE-2014-2316?
CVE-2014-2316 affects users of the Search Everything plugin for WordPress versions prior to 7.0.3.
4
What kind of attack is possible with CVE-2014-2316?
Exploiting CVE-2014-2316 allows attackers to execute arbitrary SQL commands on the affected system.
5
When was CVE-2014-2316 discovered?
CVE-2014-2316 was publicly disclosed in 2014.