CVE-2014-8586

EUVD-2014-8423 · Published Nov 4, 2014

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Technologies

Cp_Multi_View_Event_Calendar_Project Cp Multi View Event Calendar

Weaknesses

CWE-89

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://packetstormsecurity.com/files/128814/WordPress-CP-Multi-View-Event-Calendar-1.01-SQL-Injection.html
http://www.exploit-db.com/exploits/35073
http://osvdb.org/show/osvdb/113670
http://www.securityfocus.com/bid/70718
https://exchange.xforce.ibmcloud.com/vulnerabilities/97766

Potentially impacted assets

See if this affects your attack surface