Home > Vulnerability Database > CVE-2014-9173

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2014-9173

Good to know:

Date: December 2, 2014

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter.

Language: PHP

Severity Score

7.3

Related Resources (7)

Url: http://security.szurek.pl/google-doc-embedder-2514-sql-injection.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2014-9173

Url: http://www.exploit-db.com/exploits/35371

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/98944

Url: https://plugins.trac.wordpress.org/changeset/1023572/google-document-embedder

Url: http://osvdb.org/show/osvdb/115044

Url: https://www.mend.io/vulnerability-database/CVE-2014-9173

Severity Score

7.3

Weakness Type (CWE)

SQL Injection

CWE-89

Top Fix

Upgrade Version

Upgrade to version 2.5.15

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us