WP Jobs Plugin up to 1.4 on WordPress wp-admin/edit.php jobid sql injection

Summaryinfo

A vulnerability, which was classified as critical, was found in WP Jobs Plugin up to 1.4 on WordPress. This issue affects some unknown processing of the file wp-admin/edit.php. Executing a manipulation of the argument jobid as part of Parameter can lead to sql injection. This vulnerability is registered as CVE-2017-9603. It is possible to launch the attack remotely. Furthermore, an exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in WP Jobs Plugin up to 1.4 on WordPress (WordPress Plugin) and classified as critical. This vulnerability affects some unknown functionality of the file wp-admin/edit.php. The manipulation of the argument jobid as part of a Parameter leads to a sql injection vulnerability. The CWE definition for the vulnerability is CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php.

The bug was discovered 06/11/2017. The weakness was published 06/13/2017 (Website). The advisory is available at dtsa.eu. This vulnerability was named CVE-2017-9603 since 06/12/2017. The exploitation appears to be easy. The attack can be initiated remotely. A single authentication is required for exploitation. Technical details and also a public exploit are known. This vulnerability is assigned to T1505 by the MITRE ATT&CK project.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 2 days. During that time the estimated underground price was around $0-$5k. By approaching the search of inurl:wp-admin/edit.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.5 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Exploit-DB (42172). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• WordPress Plugin

Name

• WP Jobs Plugin

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion