CVE-2015-4615: SQL Injection

Published Feb 15, 2019

Updated

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables

Affected Software

1 affected component

Easy2map Easy2map-photos WordPress=1.09

Event History

Feb 15, 2019

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2015-4615?

CVE-2015-4615 is considered a high severity vulnerability due to its potential for SQL Injection.

How do I fix CVE-2015-4615?

To fix CVE-2015-4615, you should update the Easy2map-photos WordPress Plugin to the latest version that addresses this SQL Injection vulnerability.

What are the risks associated with CVE-2015-4615?

The risks associated with CVE-2015-4615 include unauthorized access to the database and exposure of sensitive data due to SQL Injection.

Which versions of the Easy2map-photos plugin are affected by CVE-2015-4615?

CVE-2015-4615 specifically affects version 1.09 of the Easy2map-photos WordPress Plugin.

Is CVE-2015-4615 easy to exploit?

CVE-2015-4615 can be easily exploited by attackers who can manipulate unsanitized input variables.