CVE-2015-3314

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/131558/WordPress-Tune-Library-1.5.4-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2015/04/16/10Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/05/08/3Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/74236Third Party Advisory, VDB Entry
https://wordpress.org/plugins/tune-library/#developersThird Party Advisory
https://www.exploit-db.com/exploits/36802/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/131558/WordPress-Tune-Library-1.5.4-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2015/04/16/10Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/05/08/3Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/74236Third Party Advisory, VDB Entry
https://wordpress.org/plugins/tune-library/#developersThird Party Advisory
https://www.exploit-db.com/exploits/36802/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Sep 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-33157.8Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files CVE-2015-33164.6CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2;CVE-2015-33174.6CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2;CVE-2015-33184.6CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2;CVE-2015-33195.0Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attacke CVE-2015-33202.1Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to CVE-2015-33216.7Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and CVE-2015-33225.0Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator B CVE-2015-33235.0The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, CVE-2015-33244.3The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, CVE-2015-33257.5SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary S CVE-2015-33265.0Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for