{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-3925", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "requesterUserId": "dc9e157c-ddf1-4983-adaf-9f01d16b5e04", "dateReserved": "2022-11-10T12:12:51.469Z", "datePublished": "2022-12-12T17:54:38.632Z", "dateUpdated": "2024-08-03T01:20:58.822Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2022-12-12T17:54:38.632Z"}, "title": "Buddybadges <= 1.0.0 - Admin+ SQLi", "problemTypes": [{"descriptions": [{"description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "buddybadges", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "1.0.0"}], "defaultStatus": "affected", "collectionURL": "https://wordpress.org/plugins"}], "descriptions": [{"lang": "en", "value": "The buddybadges WordPress plugin through 1.0.0 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users"}], "references": [{"url": "https://wpscan.com/vulnerability/178499a3-97d1-4ab2-abbe-4a9d2ebc85da", "tags": ["exploit", "vdb-entry", "technical-description"]}, {"url": "https://bulletin.iese.de/post/buddybadges_1-0-0/"}], "credits": [{"lang": "en", "value": "Kunal Sharma (University of Kaiserslautern)", "type": "finder"}, {"lang": "en", "value": "Daniel Krohmer (Fraunhofer IESE)", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T01:20:58.822Z"}, "title": "CVE Program Container", "references": [{"url": "https://wpscan.com/vulnerability/178499a3-97d1-4ab2-abbe-4a9d2ebc85da", "tags": ["exploit", "vdb-entry", "technical-description", "x_transferred"]}, {"url": "https://bulletin.iese.de/post/buddybadges_1-0-0/", "tags": ["x_transferred"]}]}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:buddybadges_project:buddybadges:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "6DA30D22-6E00-4BCE-8FE9-8F74D98AAB0B", "versionEndIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The buddybadges WordPress plugin through 1.0.0 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users"}, {"lang": "es", "value": "El complemento Buddybadges de WordPress hasta la versi\u00f3n 1.0.0 no sanitiza ni escapa un par\u00e1metro antes de usarlo en una declaraci\u00f3n SQL, lo que genera una inyecci\u00f3n de SQL explotable por usuarios con altos privilegios."}], "id": "CVE-2022-3925", "lastModified": "2024-11-21T07:20:32.760", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-12T18:15:12.037", "references": [{"source": "contact@wpscan.com", "tags": ["Broken Link"], "url": "https://bulletin.iese.de/post/buddybadges_1-0-0/"}, {"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/178499a3-97d1-4ab2-abbe-4a9d2ebc85da"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://bulletin.iese.de/post/buddybadges_1-0-0/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/178499a3-97d1-4ab2-abbe-4a9d2ebc85da"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Modified"}

{}