CVE-2023-5203

HIGHNuclei

WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-5203 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 2, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

WP Sessions Time Monitoring Full Automatic

Default status: unaffected

CVE ListBefore 1.0.9affected

Nuclei templates

1
ProjectDiscoveryCRITICALWP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL InjectionCVSS 9.8

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to SQL Injection via request parameters in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Impact

Attackers can retrieve sensitive database information without authentication, leading to data breach and privacy violations.

Remediation

Update to version 1.0.9 or later to fix the vulnerability.

WeaknessesCWE-89
AuthorsShivam Kamboj
Template tagscvecve2023wordpresswpwp-pluginsqliactivitytime
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/activitytime/wp-sessions-time-monitoring-full-automatic-108-unauthenticated-sql-injection https://wordpress.org/plugins/activitytime/ https://nvd.nist.gov/vuln/detail/CVE-2023-5203

Source: ProjectDiscovery

References

2