CVE-2017-20099

Summary

A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.

Affected Software

Weaknesses

• CWE-94: CWE-94 Code Injection

ADP Enrichment

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2017/Feb/74
• https://vuldb.com/?id.97367

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• http://seclists.org/fulldisclosure/2017/Feb/74
• https://vuldb.com/?id.97367

• ←Previous
• Next→