Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2014-5347
PUBLISHED
More InfoOfficial Page
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
View Known Exploited Vulnerability (KEV) details
Published At-19 Aug, 2014 | 19:00
Updated At-06 Aug, 2024 | 11:41
Rejected At-
▼CVE Numbering Authority (CNA)

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) disqus_replace, (2) disqus_public_key, or (3) disqus_secret_key parameter to wp-admin/edit-comments.php in manage.php or that (4) reset or (5) delete plugin options via the reset parameter to wp-admin/edit-comments.php.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://wordpress.org/plugins/disqus-comment-system/other_notes
x_refsource_CONFIRM
http://packetstormsecurity.com/files/127847/WordPress-Disqus-2.7.5-CSRF-Cross-Site-Scripting.html
x_refsource_MISC
http://seclists.org/fulldisclosure/2014/Aug/35
mailing-list
x_refsource_FULLDISC
http://packetstormsecurity.com/files/127852/Disqus-2.7.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
x_refsource_MISC
https://www.nikcub.com/posts/multiple-vulnerabilities-in-disqus-wordpress-plugin
x_refsource_MISC
https://gist.github.com/nikcub/cb5dc7a5464276c8424a
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/95288
vdb-entry
x_refsource_XF
http://www.securityfocus.com/bid/69205
vdb-entry
x_refsource_BID
http://www.exploit-db.com/exploits/34336
exploit
x_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/95289
vdb-entry
x_refsource_XF
Hyperlink: https://wordpress.org/plugins/disqus-comment-system/other_notes
Resource:
x_refsource_CONFIRM
Hyperlink: http://packetstormsecurity.com/files/127847/WordPress-Disqus-2.7.5-CSRF-Cross-Site-Scripting.html
Resource:
x_refsource_MISC
Hyperlink: http://seclists.org/fulldisclosure/2014/Aug/35
Resource:
mailing-list
x_refsource_FULLDISC
Hyperlink: http://packetstormsecurity.com/files/127852/Disqus-2.7.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
Resource:
x_refsource_MISC
Hyperlink: https://www.nikcub.com/posts/multiple-vulnerabilities-in-disqus-wordpress-plugin
Resource:
x_refsource_MISC
Hyperlink: https://gist.github.com/nikcub/cb5dc7a5464276c8424a
Resource:
x_refsource_MISC
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95288
Resource:
vdb-entry
x_refsource_XF
Hyperlink: http://www.securityfocus.com/bid/69205
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://www.exploit-db.com/exploits/34336
Resource:
exploit
x_refsource_EXPLOIT-DB
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95289
Resource:
vdb-entry
x_refsource_XF
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://wordpress.org/plugins/disqus-comment-system/other_notes
x_refsource_CONFIRM
x_transferred
http://packetstormsecurity.com/files/127847/WordPress-Disqus-2.7.5-CSRF-Cross-Site-Scripting.html
x_refsource_MISC
x_transferred
http://seclists.org/fulldisclosure/2014/Aug/35
mailing-list
x_refsource_FULLDISC
x_transferred
http://packetstormsecurity.com/files/127852/Disqus-2.7.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
x_refsource_MISC
x_transferred
https://www.nikcub.com/posts/multiple-vulnerabilities-in-disqus-wordpress-plugin
x_refsource_MISC
x_transferred
https://gist.github.com/nikcub/cb5dc7a5464276c8424a
x_refsource_MISC
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/95288
vdb-entry
x_refsource_XF
x_transferred
http://www.securityfocus.com/bid/69205
vdb-entry
x_refsource_BID
x_transferred
http://www.exploit-db.com/exploits/34336
exploit
x_refsource_EXPLOIT-DB
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/95289
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: https://wordpress.org/plugins/disqus-comment-system/other_notes
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://packetstormsecurity.com/files/127847/WordPress-Disqus-2.7.5-CSRF-Cross-Site-Scripting.html
Resource:
x_refsource_MISC
x_transferred
Hyperlink: http://seclists.org/fulldisclosure/2014/Aug/35
Resource:
mailing-list
x_refsource_FULLDISC
x_transferred
Hyperlink: http://packetstormsecurity.com/files/127852/Disqus-2.7.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://www.nikcub.com/posts/multiple-vulnerabilities-in-disqus-wordpress-plugin
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://gist.github.com/nikcub/cb5dc7a5464276c8424a
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95288
Resource:
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: http://www.securityfocus.com/bid/69205
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://www.exploit-db.com/exploits/34336
Resource:
exploit
x_refsource_EXPLOIT-DB
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/95289
Resource:
vdb-entry
x_refsource_XF
x_transferred
Details not found