CVE-2017-20103

🗓️ 27 Jun 2022 21:50:11Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 42 Views🌐 WEB

CVE-2017-20103 vulnerability in Kama Click Counter Plugin up to 3.4.8 allows remote SQL injection

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2017-20103	28 Jun 202202:35	–	circl
CNNVD	Wordpress plugin Kama Click Counter SQL注入漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Wordpress Kama Click Counter SQL注入漏洞	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2017-20103 Kama Click Counter Plugin admin.php Blind sql injection	27 Jun 202221:50	–	cvelist
EUVD	EUVD-2017-11110	7 Oct 202500:30	–	euvd
NVD	CVE-2017-20103	27 Jun 202222:15	–	nvd
Prion	Sql injection	27 Jun 202222:15	–	prion
RedhatCVE	CVE-2017-20103	22 May 202501:56	–	redhatcve
Vulnrichment	CVE-2017-20103 Kama Click Counter Plugin admin.php Blind sql injection	27 Jun 202221:50	–	vulnrichment

NVD

Vulners

Node

wp-kama kama_click_counterRange≤3.4.9wordpress

[
  {
    "product": "Kama Click Counter Plugin",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.0"
      },
      {
        "status": "affected",
        "version": "3.4.1"
      },
      {
        "status": "affected",
        "version": "3.4.2"
      },
      {
        "status": "affected",
        "version": "3.4.3"
      },
      {
        "status": "affected",
        "version": "3.4.4"
      },
      {
        "status": "affected",
        "version": "3.4.5"
      },
      {
        "status": "affected",
        "version": "3.4.6"
      },
      {
        "status": "affected",
        "version": "3.4.7"
      },
      {
        "status": "affected",
        "version": "3.4.8"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2017/Feb/67
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
order_by	query param	wp-admin/admin.php	Blind SQL injection via order_by/order parameters in wp-admin/admin.php	CWE-89
order	query param	wp-admin/admin.php	Blind SQL injection via order_by/order parameters in wp-admin/admin.php	CWE-89