Lucene search
CVE-2018-20556
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPres
Show more
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | Sql injection | 21 Mar 201916:00 | – | prion |
 | CVE-2018-20556 | 18 Mar 201915:43 | – | cvelist |
 | WordPress Booking Calendar Plugin SQL Injection (CVE-2018-20556) | 28 Nov 202200:00 | – | checkpoint_advisories |
 | WordPress Booking Calendar plugin <= 8.4.5.14 - SQL Injection (SQLi) vulnerability | 14 Feb 201900:00 | – | patchstack |
 | CVE-2018-20556 | 22 May 202507:41 | – | redhatcve |
 | WordPress Booking Calendar 8.4.3 Plugin - Authenticated SQL Injection Vulnerability | 15 Feb 201900:00 | – | zdt |
 | WordPress Plugin Booking Calendar 8.4.3 - (Authenticated) SQL Injection | 14 Feb 201900:00 | – | exploitdb |
 | CVE-2018-20556 | 21 Mar 201916:00 | – | nvd |
 | WordPress Booking Calendar 8.4.3 SQL Injection | 15 Feb 201900:00 | – | packetstorm |
 | WordPress Booking Calendar Plugin < 8.4.5 SQL Injection Vulnerability | 28 Mar 201900:00 | – | openvas |
10
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| booking_id | request body | /wp-admin/admin-ajax.php | Authenticated SQL Injection vulnerability in Booking Calendar plugin allows attackers to execute arbitrary SQL commands via the booking_id parameter. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo21 Mar 2019 16:00Current
9.1High risk
Vulners AI Score9.1
CVSS26.5
CVSS38.8
EPSS0.14676