CVE-2022-0867

CRITICALNuclei

ARPrice Lite < 3.6.1 - Unauthenticated SQLi

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-0867 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 14, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Pricing Table Plugin

CVE List3.6.1 to < 3.6.1affected

pricing_table

Browse reputeinfosystems / pricing_table
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress ARPrice <3.6.1 - SQL InjectionCVSS 9.8

WordPress ARPrice plugin prior to 3.6.1 contains a SQL injection vulnerability. It fails to properly sanitize and escape user supplied POST data before being inserted in an SQL statement and executed via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized accessand data leakage.

Remediation

Update to the latest version of ARPrice plugin (3.6.1) or apply the vendor-provided patch.

WeaknessesCWE-89
Authorstheamanrawat
Template tagstime-based-sqlicvecve2022unauthwpwordpresswp-pluginarprice-responsive-pricing-tablesqliwpscanreputeinfosystemsvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:reputeinfosystems:pricing_table:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/62803aae-9896-410b-9398-3497a838e494 https://wordpress.org/plugins/arprice-responsive-pricing-table/ https://nvd.nist.gov/vuln/detail/CVE-2022-0867 https://github.com/20142995/sectool https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2