CVE-2015-6828 SecureMoz Security Audit <= 1.0.5 - PHP Object Injection
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and earlier for WordPress does not use an HTTPS session for downloading serialized data, which allows man-in-the-middle attackers to conduct PHP object injection attacks and execute arbitrary PHP code by modifying the client-server data stream. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| securemoz security audit | <= 1.0.5 | No fix listed |
| wordpress securemoz-security-audit(WordPress) | <= 1.0.5 | No fix listed |
References
- [oss-security] 20150905 Some Wordpress Plugin Stuff exploit mailing-list third-party-advisory
- [oss-security] 20150906 Re: Some Wordpress Plugin Stuff (some, wordpress, stuff) exploit mailing-list third-party-advisory
- wpvulndb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org