CVE-2014-7139

概要

参考情報

• packetstormsecurity.com/files/128625/WordPress-Contact-Form-DB-2.8.13-Cross-Site-Scripting.html · Exploit
• securityfocus.com/archive/1/533642/100/0/threaded
• securityfocus.com/bid/70374
• wordpress.org/plugins/contact-form-7-to-database-extension/changelog
• htbridge.com/advisory/HTB23233 · Exploit

contact form db のその他の脆弱性

• CVE-2015-1874中 6.8Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8…
• CVE-2015-2040中 4.3Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin 2.8.26 for WordPr…