CVE-2015-2562 : Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allo

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order, or (3) filter_manufacturer_ids in a displayproducts action to index.php.

Published 2015-03-20 14:59:04

Updated 2016-12-03 03:05:13

Source MITRE

View at NVD, CVE.org

Vulnerability category: Sql Injection

Exploit prediction scoring system (EPSS) score for CVE-2015-2562

EPSS FAQ

3.78%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2015-2562

Web-Dorado ECommerce WD for Joomla! search_category_id SQL Injection Scanner

Disclosure Date: 2015-03-20

First seen: 2020-04-26

auxiliary/scanner/http/joomla_ecommercewd_sqli_scanner

This module will scan for hosts vulnerable to an unauthenticated SQL injection within the advanced search feature of the Web-Dorado ECommerce WD 1.2.5 and likely prior. Authors: - bperry

More information

CVSS scores for CVE-2015-2562

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2015-2562

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-2562

http://www.securityfocus.com/bid/73285

Joomla! ECommerce WD 'com_ecommercewd' Component Multiple SQL Injection Vulnerabilities
http://packetstormsecurity.com/files/130896/Joomla-ECommerce-WD-1.2.5-SQL-Injection.html

Joomla ECommerce-WD 1.2.5 SQL Injection ≈ Packet Storm
Exploit
http://seclists.org/fulldisclosure/2015/Mar/123

Full Disclosure: Web-Dorado ECommerce-WD for Joomla plugin multiple unauthenticated SQL injections
Exploit
https://www.exploit-db.com/exploits/36439/

Joomla! Component ECommerce-WD 1.2.5 - SQL Injection

Products affected by CVE-2015-2562

Web-dorado » Ecommerce Wd » Version: 1.2.5 For Joomla!
cpe:2.3:a:web-dorado:ecommerce_wd:1.2.5:*:*:*:*:joomla\!:*:*
Matching versions