CVE-2013-2011

Published: Dic 26, 2019 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2013-2002 Aliases: GSD-2013-2011
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
MEDIUM 6,8
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: partial

Description

AI Translation Available

WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0591
Percentile
0,9th
Updated

EPSS Score Trend (Last 91 Days)

116

Improper Encoding or Escaping of Output

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability Access Control
Potential Impacts:
Modify Application Data Execute Unauthorized Code Or Commands Bypass Protection Mechanism
Applicable Platforms
Technologies: AI/ML, Database Server, Not Technology-Specific, Web Server
Likelihood of Exploit: High
View CWE Details
Application

W3 Super Cache by Automattic

Product Information
Vendor Automattic
Product W3 Super Cache
Version Range Affected
To 1.3.2 (exclusive)
cpe:2.3:a:automattic:w3_super_cache:*:*:*:*:*:wordpress:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://exchange.xforce.ibmcloud.com/vulnerabilities/83800
Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83800
https://security-tracker.debian.org/tracker/CVE-2013-2011
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2011
http://www.openwall.com/lists/oss-security/2013/04/25/4
Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/04/25/4
http://www.securityfocus.com/bid/59473
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/59473
https://exchange.xforce.ibmcloud.com/vulnerabilities/83800
Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83800
https://security-tracker.debian.org/tracker/CVE-2013-2011
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2011
http://www.openwall.com/lists/oss-security/2013/04/25/4
Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/04/25/4
http://www.securityfocus.com/bid/59473
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/59473