Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2017-15375

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress WpJobBoard是一款应用在WordPress中的工作面板插件。wpjb-email、wpjb-job、wpjb-application和wpjb-membership都是其中的组件。wpjb-email是一个电子邮件组件。wpjb-job是一个工作管理组件。 WordPress WpJobBoard 4.5.1版本中的多个组件的‘query’和‘id’参数存在多个跨站脚本漏洞。远程攻击者可利用该漏洞注入恶意的脚本代码，劫持管理员会话证书。以下组件受到影响：wpjb-email；w

AI Predicted 6.1 Difficulty: Easy EPSS 0.90% · P58

Possible ATT&CK Techniques 1 AI

T1189.001
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-15375

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application for WordPress. The vulnerabilities are located in the `query` and `id` parameters of the `wpjb-email`, `wpjb-job`, `wpjb-application`, and `wpjb-membership` modules. Remote attackers are able to inject malicious script code to hijack admin session credentials via the backend, or to manipulate the backend on client-side performed requests. The attack vector is non-persistent and the request method to inject is GET. The attacker does not need a privileged user account to perform a successful exploitation.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress WpJobBoard多个组件跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress WpJobBoard是一款应用在WordPress中的工作面板插件。wpjb-email、wpjb-job、wpjb-application和wpjb-membership都是其中的组件。wpjb-email是一个电子邮件组件。wpjb-job是一个工作管理组件。 WordPress WpJobBoard 4.5.1版本中的多个组件的‘query’和‘id’参数存在多个跨站脚本漏洞。远程攻击者可利用该漏洞注入恶意的脚本代码，劫持管理员会话证书。以下组件受到影响：wpjb-email；w
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2017-15375

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-15375

请登录查看更多情报信息。

Other References for CVE-2017-15375 (1)

Same Patch Batch · n/a · 2017-10-16 · 39 CVEs total

CVE-2017-15372 Sound eXchange 缓冲区错误漏洞
CVE-2014-3702 Red Hat eNovance eDeploy 路径遍历漏洞
CVE-2014-7851 Red Hat oVirt 权限许可和访问控制问题漏洞
CVE-2014-8087 WordPress post highlights插件跨站脚本漏洞
CVE-2014-8621 WordPress Store Locator插件SQL注入漏洞
CVE-2014-9147 Fiyo CMS 安全漏洞
CVE-2014-9148 Fiyo CMS 安全漏洞
CVE-2014-0029 Red Hat katello-headpin SAM web应用程序跨站脚本漏洞
CVE-2017-15370 Sound eXchange 缓冲区错误漏洞
CVE-2017-15371 Sound eXchange 安全漏洞
CVE-2017-15297 SAP Hostcontrol 安全漏洞
CVE-2017-15373 E-Sic SQL注入漏洞
CVE-2017-15374 Shopware content management system backend模块跨站脚本漏洞
CVE-2017-15376 Mobatek MobaXterm TELNET服务安全漏洞
CVE-2017-15302 CPUID CPU-Z 权限许可和访问控制问题漏洞
CVE-2017-15303 CPUID CPU-Z 安全漏洞
CVE-2017-15362 Enhancesoft osTicket 安全漏洞
CVE-2017-15368 radare2 安全漏洞
CVE-2017-15369 Artifex MuPDF 安全漏洞
CVE-2017-15361 Infineon Trusted Platform Module Infineon RSA库安全漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2017-15375

No comments yet

Leave a comment