CVE-2019-11557

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-11557
The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://seclists.org/fulldisclosure/2019/Apr/35 Mailing List Third Party Advisory
https://lists.openwall.net/full-disclosure/2019/04/23/1 Exploit Mailing List Third Party Advisory
https://wordpress.org/plugins/contact-form-builder/#developers Release Notes
https://wpvulndb.com/vulnerabilities/9260 Third Party Advisory
http://seclists.org/fulldisclosure/2019/Apr/35 Mailing List Third Party Advisory
https://lists.openwall.net/full-disclosure/2019/04/23/1 Exploit Mailing List Third Party Advisory
https://wordpress.org/plugins/contact-form-builder/#developers Release Notes
https://wpvulndb.com/vulnerabilities/9260 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:web-dorado:wp_form_builder:*:*:*:*:*:wordpress:*:*
History

21 Nov 2024, 04:21

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2019/Apr/35 - Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2019/Apr/35 - Mailing List, Third Party Advisory
References () https://lists.openwall.net/full-disclosure/2019/04/23/1 - Mailing List, Exploit, Third Party Advisory () https://lists.openwall.net/full-disclosure/2019/04/23/1 - Exploit, Mailing List, Third Party Advisory
References () https://wordpress.org/plugins/contact-form-builder/#developers - Release Notes () https://wordpress.org/plugins/contact-form-builder/#developers - Release Notes
References () https://wpvulndb.com/vulnerabilities/9260 - Third Party Advisory () https://wpvulndb.com/vulnerabilities/9260 - Third Party Advisory

27 Feb 2023, 14:38

Type Values Removed Values Added
References (MISC) http://seclists.org/fulldisclosure/2019/Apr/35 - Third Party Advisory (MISC) http://seclists.org/fulldisclosure/2019/Apr/35 - Mailing List, Third Party Advisory
References (MISC) https://wpvulndb.com/vulnerabilities/9260 - (MISC) https://wpvulndb.com/vulnerabilities/9260 - Third Party Advisory
Information

Published : 2019-04-26 22:29

Updated : 2024-11-21 04:21

NVD link : CVE-2019-11557

Mitre link : CVE-2019-11557

CVE.ORG link : CVE-2019-11557

JSON object : View

Products Affected

web-dorado

  • wp_form_builder
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-352

Cross-Site Request Forgery (CSRF)