CVE-2021-24361 - Vulnerability Details - OpenCVE

In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.01126.

Key SSVC decision points have not yet been added.

Vendors	Products
Ayecode	Location Manager

Configuration 1 [-]

cpe:2.3:a:ayecode:location_manager:*:*:*:*:*:wordpress:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2021-11274	In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://wpgeodirectory.com/downloads/location-manager/
https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025

History

No history.

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2021-06-21T19:18:14

Updated: 2024-08-03T19:28:23.436Z

Reserved: 2021-01-14T00:00:00

Link: CVE-2021-24361

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-06-21T20:15:08.347

Modified: 2024-11-21T05:52:54.917

Link: CVE-2021-24361

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "Location Manager", "vendor": "AyeCode Ltd", "versions": [{"lessThan": "2.1.0.10", "status": "affected", "version": "2.1.0.10", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Rafal Goryl"}], "descriptions": [{"lang": "en", "value": "In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-06-21T19:18:14", "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"tags": ["x_refsource_MISC"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}], "source": {"discovery": "UNKNOWN"}, "title": "GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections", "x_generator": "WPScan CVE Generator", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "contact@wpscan.com", "ID": "CVE-2021-24361", "STATE": "PUBLIC", "TITLE": "GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Location Manager", "version": {"version_data": [{"version_affected": "<", "version_name": "2.1.0.10", "version_value": "2.1.0.10"}]}}]}, "vendor_name": "AyeCode Ltd"}]}}, "credit": [{"lang": "eng", "value": "Rafal Goryl"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues."}]}, "generator": "WPScan CVE Generator", "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-89 SQL Injection"}]}]}, "references": {"reference_data": [{"name": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025", "refsource": "CONFIRM", "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"name": "https://wpgeodirectory.com/downloads/location-manager/", "refsource": "MISC", "url": "https://wpgeodirectory.com/downloads/location-manager/"}]}, "source": {"discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T19:28:23.436Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}]}]}, "cveMetadata": {"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "assignerShortName": "WPScan", "cveId": "CVE-2021-24361", "datePublished": "2021-06-21T19:18:14", "dateReserved": "2021-01-14T00:00:00", "dateUpdated": "2024-08-03T19:28:23.436Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ayecode:location_manager:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "98B08F8C-FA2F-4AC7-A711-A8F1642339DC", "versionEndExcluding": "2.1.0.10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues."}, {"lang": "es", "value": "En el plugin Location Manager de WordPress versiones anteriores a 2.1.0.10, la acci\u00f3n AJAX gd_popular_location_list no saneaba o comprobaba apropiadamente algunos de sus par\u00e1metros POST, que luego se utilizaban en una sentencia SQL, conllevando a problemas de inyecci\u00f3n SQL no autenticada"}], "id": "CVE-2021-24361", "lastModified": "2024-11-21T05:52:54.917", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-06-21T20:15:08.347", "references": [{"source": "contact@wpscan.com", "tags": ["Product", "Vendor Advisory"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}, {"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Vendor Advisory"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "contact@wpscan.com", "type": "Secondary"}]}