Dotclear up to 2.6.2 categories_order sql injection

Summaryinfo

A vulnerability has been found in Dotclear and classified as critical. This vulnerability affects unknown code. Performing a manipulation of the argument categories_order results in sql injection. This vulnerability is known as CVE-2014-3783. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Dotclear (Blog Software). It has been classified as critical. This affects an unknown part. The manipulation of the argument categories_order with an unknown input leads to a sql injection vulnerability. CWE is classifying the issue as CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote authenticated users with the manage categories permission to execute arbitrary SQL commands via the categories_order parameter.

The weakness was published 05/22/2014 as not defined mailinglist post (Full-Disclosure). The advisory is shared at seclists.org. This vulnerability is uniquely identified as CVE-2014-3783 since 05/19/2014. It is possible to initiate the attack remotely. A authentication is necessary for exploitation. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1505 for this issue.

Upgrading to version 2.0.2 eliminates this vulnerability.

Similar entries are available at VDB-70018 and VDB-70017. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Blog Software

Name

• Dotclear

Version

• 1.2.1
• 1.2.2
• 1.2.3
• 1.2.4
• 1.2.5
• 1.2.6
• 1.2.7
• 1.2.8
• 2.0
• 2.0.1
• 2.0.2
• 2.1.1
• 2.1.3
• 2.1.4
• 2.1.5
• 2.1.6
• 2.1.7
• 2.2.1
• 2.2.2
• 2.2.3
• 2.3.0
• 2.3.1
• 2.4.2
• 2.4.3
• 2.4.4
• 2.5.0
• 2.5.1
• 2.5.2
• 2.5.3
• 2.6.1
• 2.6.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion