CVE-2009-2144 FireStats <1.6.2 - SQL Injection
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| edgewall firestats | <= 1.6.1 | No fix listed |
| edgewall firestats | = 0.9.0-beta | No fix listed |
| edgewall firestats | = 0.9.1-beta | No fix listed |
| edgewall firestats | = 0.9.2-beta | No fix listed |
| edgewall firestats | = 0.9.3-beta | No fix listed |
| edgewall firestats | = 0.9.4-beta | No fix listed |
| edgewall firestats | = 0.9.5-beta | No fix listed |
| edgewall firestats | = 0.9.6-beta | No fix listed |
| edgewall firestats | = 0.9.7-beta | No fix listed |
| edgewall firestats | = 0.9.8-beta | No fix listed |
| edgewall firestats | = 0.9.9 | No fix listed |
| edgewall firestats | = 1.0 | No fix listed |
| edgewall firestats | = 1.0.0-rc1 | No fix listed |
| edgewall firestats | = 1.0.1-rc2 | No fix listed |
| edgewall firestats | = 1.0.2-rc3 | No fix listed |
| edgewall firestats | = 1.0.2-stable | No fix listed |
| edgewall firestats | = 1.1.1-rc1 | No fix listed |
| edgewall firestats | = 1.1.2-rc2 | No fix listed |
| edgewall firestats | = 1.1.3-rc3 | No fix listed |
| edgewall firestats | = 1.1.3-rc4 | No fix listed |
| edgewall firestats | = 1.1.4-rc5 | No fix listed |
| edgewall firestats | = 1.1.5-stable | No fix listed |
| edgewall firestats | = 1.1.6-stable | No fix listed |
| edgewall firestats | = 1.1.7-stable | No fix listed |
| edgewall firestats | = 1.1.8-stable | No fix listed |
Show 41 more
| Product | Affected versions | Fixed in |
|---|---|---|
| edgewall firestats | = 1.2.0-beta | No fix listed |
| edgewall firestats | = 1.2.1-rc1 | No fix listed |
| edgewall firestats | = 1.2.2-rc2 | No fix listed |
| edgewall firestats | = 1.2.3-rc3 | No fix listed |
| edgewall firestats | = 1.2.4-stable | No fix listed |
| edgewall firestats | = 1.3.0-beta | No fix listed |
| edgewall firestats | = 1.3.1-beta | No fix listed |
| edgewall firestats | = 1.3.2-beta | No fix listed |
| edgewall firestats | = 1.3.3-beta | No fix listed |
| edgewall firestats | = 1.3.4-rc1 | No fix listed |
| edgewall firestats | = 1.3.5-rc2 | No fix listed |
| edgewall firestats | = 1.3.6-stable | No fix listed |
| edgewall firestats | = 1.4 | No fix listed |
| edgewall firestats | = 1.4.0-beta | No fix listed |
| edgewall firestats | = 1.4.1-beta | No fix listed |
| edgewall firestats | = 1.4.2-beta | No fix listed |
| edgewall firestats | = 1.4.3-rc1 | No fix listed |
| edgewall firestats | = 1.4.4-stable | No fix listed |
| edgewall firestats | = 1.5 | No fix listed |
| edgewall firestats | = 1.5.0-beta | No fix listed |
| edgewall firestats | = 1.5.1-beta | No fix listed |
| edgewall firestats | = 1.5.2-beta | No fix listed |
| edgewall firestats | = 1.5.3-rc1 | No fix listed |
| edgewall firestats | = 1.5.4-rc2 | No fix listed |
| edgewall firestats | = 1.5.5-rc3 | No fix listed |
| edgewall firestats | = 1.5.6-beta | No fix listed |
| edgewall firestats | = 1.5.7-rc1 | No fix listed |
| edgewall firestats | = 1.5.8-rc2 | No fix listed |
| edgewall firestats | = 1.5.9-rc3 | No fix listed |
| edgewall firestats | = 1.5.10-rc4 | No fix listed |
| edgewall firestats | = 1.5.12-stable | No fix listed |
| edgewall firestats | = 1.6 | No fix listed |
| edgewall firestats | = 1.6.0-stable | No fix listed |
| edgewall firestats | = 1.6.0-beta1 | No fix listed |
| edgewall firestats | = 1.6.0-beta2 | No fix listed |
| edgewall firestats | = 11.5.11-stable | No fix listed |
| firestats | = 1.6.0-rc1 | No fix listed |
| firestats | = 1.6.0-rc2 | No fix listed |
| firestats | = 1.6.0-rc3 | No fix listed |
| firestats | = 1.6.0-rc4 | No fix listed |
| wordpress firestats(WordPress) | < 1.6.2 | 1.6.2 |
References
- firestats.cc patch vendor-advisory
- 35400 third-party-advisory vendor-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org