CVE-2022-3142

The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default administrators, however can be configured otherwise via the plugin settings.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://packetstormsecurity.com/files/171477/WordPress-NEX-Forms-SQL-Injection.html
https://medium.com/%40elias.hohl/authenticated-sql-injection-vulnerability-in-nex-forms-wordpress-plugin-35b8558dd0f5
https://wpscan.com/vulnerability/8acc0fc6-efe6-4662-b9ac-6342a7823328	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:basixonline:nex-forms:*:*:*:*:*:wordpress:*:*

History

07 Nov 2023, 03:50

Type	Values Removed	Values Added
References	{'url': 'https://medium.com/@elias.hohl/authenticated-sql-injection-vulnerability-in-nex-forms-wordpress-plugin-35b8558dd0f5', 'name': 'https://medium.com/@elias.hohl/authenticated-sql-injection-vulnerability-in-nex-forms-wordpress-plugin-35b8558dd0f5', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}	() https://medium.com/%40elias.hohl/authenticated-sql-injection-vulnerability-in-nex-forms-wordpress-plugin-35b8558dd0f5 -

Information

Published : 2022-09-19 14:15

Updated : 2024-02-28 19:29

NVD link : CVE-2022-3142

Mitre link : CVE-2022-3142

CVE.ORG link : CVE-2022-3142

JSON object : View

Products Affected

basixonline

nex-forms

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2022-3142", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-09-19T14:15:11.357", "references": [{"url": "http://packetstormsecurity.com/files/171477/WordPress-NEX-Forms-SQL-Injection.html", "source": "contact@wpscan.com"}, {"url": "https://medium.com/%40elias.hohl/authenticated-sql-injection-vulnerability-in-nex-forms-wordpress-plugin-35b8558dd0f5", "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/8acc0fc6-efe6-4662-b9ac-6342a7823328", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "contact@wpscan.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default administrators, however can be configured otherwise via the plugin settings."}, {"lang": "es", "value": "El plugin NEX-Forms de WordPress versiones anteriores a 7.9.7 no sanea y escapa apropiadamente de la entrada del usuario antes de usarla en las sentencias SQL, conllevando a inyecciones SQL. El ataque puede ser ejecutado por cualquier persona que tenga permiso para visualizar la tabla de estad\u00edsticas de formularios, por defecto los administradores, sin embargo puede ser configurado de otra manera por medio de los ajustes del plugin"}], "lastModified": "2023-11-07T03:50:49.870", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:basixonline:nex-forms:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "F8257709-32ED-4314-9E50-58B9B8CABA8D", "versionEndExcluding": "7.9.7"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}