CVE-2015-4063

概要

参考情報

• packetstormsecurity.com/files/132038/WordPress-NewStatPress-0.9.8-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/bid/74773
• wordpress.org/plugins/newstatpress/changelog · Patch
• exploit-db.com/exploits/37107 · Exploit

newstatpress のその他の脆弱性

• CVE-2017-20094中 5.4A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processin…
• CVE-2022-0206中 6.1The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, lead…
• CVE-2017-18575中 6.1The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.
• CVE-2015-9315緊急 9.8The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
• CVE-2015-9314中 6.1The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.