CVE-2018-25106 - webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injection

Back Back to CVE browser

MEDIUM

webuidesigning NebulaX Theme Legacy.php nebula_send_to_hubspot sql injection

Published Dec 23, 2024

5.3

MEDIUM

CVSS 4.0

EPSS 0.36%

Description

A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebula_send_to_hubspot of the file libs/Legacy/Legacy.php. The manipulation leads to sql injection. The attack may be initiated remotely. The patch is named 41230a81db0f671c570c2644bc2f80565ca83c5a. It is recommended to apply a patch to fix this issue.

Affected products

Vendor Webuidesigning Product NebulaX Theme Default
n/a
- Version
  5.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Webuidesigning

NebulaX Theme

n/a

Version	Status	Constraints
5.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (3)

https://github.com/webuidesigning/NebulaX/commit/41230a81db0f671c570c2644bc2f80565ca83c5a
patch
https://vuldb.com/?ctiid.289163
signaturepermissions-required
https://vuldb.com/?id.289163
vdb-entrytechnical-description

Link	Providers	Tags
https://github.com/webuidesigning/NebulaX/commit/41230a81db0f671c570c2644bc2f80565ca83c5a		patch
https://vuldb.com/?ctiid.289163		signaturepermissions-required
https://vuldb.com/?id.289163		vdb-entrytechnical-description