CVE-2013-1852

CVE Descriptions

SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-89	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	7.5		AV:N/AC:L/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Exploit information

Exploit Database EDB-ID : 24789

Publication date : 2013-03-14 23h00 +00:00
Author : Joshua Reynolds
EDB Verified : No

Products Mentioned

Configuraton 0

Kolja_schleich>>Leaguemanager >> Version To (including) 3.8

Kolja_schleich>>Leaguemanager >> Version 1.0

Kolja_schleich>>Leaguemanager >> Version 1.1

Kolja_schleich>>Leaguemanager >> Version 1.2

Kolja_schleich>>Leaguemanager >> Version 1.2.1

Kolja_schleich>>Leaguemanager >> Version 1.2.2

Kolja_schleich>>Leaguemanager >> Version 1.3

Kolja_schleich>>Leaguemanager >> Version 1.4

Kolja_schleich>>Leaguemanager >> Version 1.4.1

Kolja_schleich>>Leaguemanager >> Version 1.4.2

Kolja_schleich>>Leaguemanager >> Version 1.5

Kolja_schleich>>Leaguemanager >> Version 2.0

Kolja_schleich>>Leaguemanager >> Version 2.1

Kolja_schleich>>Leaguemanager >> Version 2.2

Kolja_schleich>>Leaguemanager >> Version 2.3

Kolja_schleich>>Leaguemanager >> Version 2.3.1

Kolja_schleich>>Leaguemanager >> Version 2.4

Kolja_schleich>>Leaguemanager >> Version 2.4.1

Kolja_schleich>>Leaguemanager >> Version 2.5

Kolja_schleich>>Leaguemanager >> Version 2.5.1

Kolja_schleich>>Leaguemanager >> Version 2.5.2

Kolja_schleich>>Leaguemanager >> Version 2.6

Kolja_schleich>>Leaguemanager >> Version 2.6.1

Kolja_schleich>>Leaguemanager >> Version 2.6.2

Kolja_schleich>>Leaguemanager >> Version 2.6.3

Kolja_schleich>>Leaguemanager >> Version 2.7

Kolja_schleich>>Leaguemanager >> Version 2.7.1

Kolja_schleich>>Leaguemanager >> Version 2.8

Kolja_schleich>>Leaguemanager >> Version 2.9

Kolja_schleich>>Leaguemanager >> Version 2.9.1

Kolja_schleich>>Leaguemanager >> Version 2.9.2

Kolja_schleich>>Leaguemanager >> Version 2.9.3

Kolja_schleich>>Leaguemanager >> Version 3.0

Kolja_schleich>>Leaguemanager >> Version 3.0.1

Kolja_schleich>>Leaguemanager >> Version 3.0.2

Kolja_schleich>>Leaguemanager >> Version 3.0.3

Kolja_schleich>>Leaguemanager >> Version 3.0.4

Kolja_schleich>>Leaguemanager >> Version 3.1

Kolja_schleich>>Leaguemanager >> Version 3.1.1

Kolja_schleich>>Leaguemanager >> Version 3.1.2

Kolja_schleich>>Leaguemanager >> Version 3.1.3

Kolja_schleich>>Leaguemanager >> Version 3.1.4

Kolja_schleich>>Leaguemanager >> Version 3.1.5

Kolja_schleich>>Leaguemanager >> Version 3.1.6

Kolja_schleich>>Leaguemanager >> Version 3.1.7

Kolja_schleich>>Leaguemanager >> Version 3.1.8

Kolja_schleich>>Leaguemanager >> Version 3.1.9

Kolja_schleich>>Leaguemanager >> Version 3.2

Kolja_schleich>>Leaguemanager >> Version 3.2.1

Kolja_schleich>>Leaguemanager >> Version 3.2.2

Kolja_schleich>>Leaguemanager >> Version 3.3

Kolja_schleich>>Leaguemanager >> Version 3.3.1

Kolja_schleich>>Leaguemanager >> Version 3.4

Kolja_schleich>>Leaguemanager >> Version 3.4.1

Kolja_schleich>>Leaguemanager >> Version 3.4.2

Kolja_schleich>>Leaguemanager >> Version 3.5

Kolja_schleich>>Leaguemanager >> Version 3.5.1

Kolja_schleich>>Leaguemanager >> Version 3.5.2

Kolja_schleich>>Leaguemanager >> Version 3.5.3

Kolja_schleich>>Leaguemanager >> Version 3.5.4

Kolja_schleich>>Leaguemanager >> Version 3.5.5

Kolja_schleich>>Leaguemanager >> Version 3.5.6

Kolja_schleich>>Leaguemanager >> Version 3.6

Kolja_schleich>>Leaguemanager >> Version 3.6.1

Kolja_schleich>>Leaguemanager >> Version 3.6.2

Kolja_schleich>>Leaguemanager >> Version 3.6.3

Kolja_schleich>>Leaguemanager >> Version 3.6.4

Kolja_schleich>>Leaguemanager >> Version 3.6.5

Kolja_schleich>>Leaguemanager >> Version 3.6.6

Kolja_schleich>>Leaguemanager >> Version 3.6.7

Kolja_schleich>>Leaguemanager >> Version 3.6.8

Kolja_schleich>>Leaguemanager >> Version 3.6.9

Kolja_schleich>>Leaguemanager >> Version 3.7

References

http://www.exploit-db.com/exploits/24789
Tags : exploit, x_refsource_EXPLOIT-DB

http://packetstormsecurity.com/files/120817/WordPress-LeagueManager-3.8-SQL-Injection.html
Tags : x_refsource_MISC

http://wordpress.org/plugins/leaguemanager/changelog
Tags : x_refsource_CONFIRM

http://osvdb.org/91442
Tags : vdb-entry, x_refsource_OSVDB

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.22%	–	–
2022-02-13	–	–	1.1%	–	–
2022-03-27	–	–	1.1%	–	–
2022-04-03	–	–	1.1%	–	–
2022-05-01	–	–	0.99%	–	–
2022-05-29	–	–	0.99%	–	–
2022-08-14	–	–	0.99%	–	–
2022-11-13	–	–	0.99%	–	–
2022-11-20	–	–	0.99%	–	–
2022-11-27	–	–	0.99%	–	–
2023-03-05	–	–	0.99%	–	–
2023-03-12	–	–	–	0.12%	–
2023-03-26	–	–	–	0.12%	–
2023-04-23	–	–	–	0.1%	–
2023-09-10	–	–	–	0.1%	–
2023-09-24	–	–	–	0.09%	–
2023-12-24	–	–	–	0.08%	–
2024-02-11	–	–	–	0.08%	–
2024-04-07	–	–	–	0.08%	–
2024-06-02	–	–	–	0.08%	–
2024-08-25	–	–	–	0.1%	–
2024-10-27	–	–	–	0.08%	–
2024-12-15	–	–	–	0.08%	–
2024-12-29	–	–	–	0.08%	–
2025-01-19	–	–	–	0.08%	–
2025-02-02	–	–	–	0.08%	–
2025-02-02	–	–	–	0.08%	–
2025-03-18	–	–	–	–	0.5%
2025-03-30	–	–	–	–	0.5%
2025-04-15	–	–	–	–	0.5%
2025-05-04	–	–	–	–	0.68%
2025-05-16	–	–	–	–	0.68%
2025-06-12	–	–	–	–	2.03%
2025-09-21	–	–	–	–	1.74%
2025-10-05	–	–	–	–	1.49%
2025-11-01	–	–	–	–	1.49%
2025-11-04	–	–	–	–	1.49%
2025-11-18	–	–	–	–	1.49%
2025-11-21	–	–	–	–	1.49%
2025-12-01	–	–	–	–	1.49%
2025-12-04	–	–	–	–	1.49%
2025-12-08	–	–	–	–	1.49%

Date	Percentile
2022-02-06	41%
2022-02-13	29%
2022-03-27	3%
2022-04-03	5%
2022-05-01	34%
2022-05-29	35%
2022-08-14	36%
2022-11-13	37%
2022-11-20	36%
2022-11-27	37%
2023-03-05	38%
2023-03-12	44%
2023-03-26	45%
2023-04-23	4%
2023-09-10	41%
2023-09-24	39%
2023-12-24	34%
2024-02-11	33%
2024-04-07	34%
2024-06-02	35%
2024-08-25	42%
2024-10-27	36%
2024-12-15	37%
2024-12-29	36%
2025-01-19	36%
2025-02-02	37%
2025-02-02	37%
2025-03-18	64%
2025-03-30	63%
2025-04-15	65%
2025-05-04	7%
2025-05-16	71%
2025-06-12	83%
2025-09-21	82%
2025-10-05	8%
2025-11-01	81%
2025-11-04	8%
2025-11-18	79%
2025-11-21	8%
2025-12-01	81%
2025-12-04	8%
2025-12-08	81%

CVE-2013-1852 : Detail