CVE-2021-24361 - Vulnerability Details - OpenCVE

In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ayecode	Location Manager

Configuration 1 [-]

cpe:2.3:a:ayecode:location_manager:*:*:*:*:*:wordpress:*:*

No data.

References

Link	Providers
https://wpgeodirectory.com/downloads/location-manager/
https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025

History

No history.

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2021-06-21T19:18:14

Updated: 2024-08-03T19:28:23.436Z

Reserved: 2021-01-14T00:00:00

Link: CVE-2021-24361

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-06-21T20:15:08.347

Modified: 2024-11-21T05:52:54.917

Link: CVE-2021-24361

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Location Manager", "vendor": "AyeCode Ltd", "versions": [{"lessThan": "2.1.0.10", "status": "affected", "version": "2.1.0.10", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Rafal Goryl"}], "descriptions": [{"lang": "en", "value": "In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-06-21T19:18:14", "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"tags": ["x_refsource_MISC"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}], "source": {"discovery": "UNKNOWN"}, "title": "GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections", "x_generator": "WPScan CVE Generator", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "contact@wpscan.com", "ID": "CVE-2021-24361", "STATE": "PUBLIC", "TITLE": "GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Location Manager", "version": {"version_data": [{"version_affected": "<", "version_name": "2.1.0.10", "version_value": "2.1.0.10"}]}}]}, "vendor_name": "AyeCode Ltd"}]}}, "credit": [{"lang": "eng", "value": "Rafal Goryl"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues."}]}, "generator": "WPScan CVE Generator", "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-89 SQL Injection"}]}]}, "references": {"reference_data": [{"name": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025", "refsource": "CONFIRM", "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"name": "https://wpgeodirectory.com/downloads/location-manager/", "refsource": "MISC", "url": "https://wpgeodirectory.com/downloads/location-manager/"}]}, "source": {"discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T19:28:23.436Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}]}]}, "cveMetadata": {"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "assignerShortName": "WPScan", "cveId": "CVE-2021-24361", "datePublished": "2021-06-21T19:18:14", "dateReserved": "2021-01-14T00:00:00", "dateUpdated": "2024-08-03T19:28:23.436Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ayecode:location_manager:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "98B08F8C-FA2F-4AC7-A711-A8F1642339DC", "versionEndExcluding": "2.1.0.10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues."}, {"lang": "es", "value": "En el plugin Location Manager de WordPress versiones anteriores a 2.1.0.10, la acci\u00f3n AJAX gd_popular_location_list no saneaba o comprobaba apropiadamente algunos de sus par\u00e1metros POST, que luego se utilizaban en una sentencia SQL, conllevando a problemas de inyecci\u00f3n SQL no autenticada"}], "id": "CVE-2021-24361", "lastModified": "2024-11-21T05:52:54.917", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-06-21T20:15:08.347", "references": [{"source": "contact@wpscan.com", "tags": ["Product", "Vendor Advisory"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}, {"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Vendor Advisory"], "url": "https://wpgeodirectory.com/downloads/location-manager/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/5aff50fc-ac96-4076-a07c-bb145ae37025"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "contact@wpscan.com", "type": "Secondary"}]}